<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="1800">
<package pkgid="07df5e8a72dd0a61d39f24ad721c6404ae1c85448b00354da4f251d6faec5d1f" name="certwrapper-rocky" arch="x86_64">
  <version epoch="0" ver="0.2" rel="3.el9_ciq"/>
  <changelog author="Michael L. Young &lt;myoung@ciq.com&gt; - 0.2-3" date="1746014400">- Bumping release version</changelog>
  <changelog author="Michael L. Young &lt;myoung@ciq.com&gt; - 0.2-2" date="1733832000">- Add aarch64 support</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.2-1" date="1723464000">- Forked and updated for el9 builds</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.2" date="1709035200">- Update to latest upstream in preparation for CIQ release
- Add ciq_sbsign pesign override macro</changelog>
</package>
<package pkgid="04492f58cabf4d606f9242703de71f658aa1fe2c969dbf811cd99970a7995d92" name="ciq-sigcloud-next-release" arch="noarch">
  <version epoch="0" ver="8" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 8-1" date="1758110400">- Switch to FIPS-compatible RSA 4096 GPG key and new repo location signed with
  that key</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 7-1" date="1756123200">- Update to use major-version specific GPG key
- Ensure all GPG keys for all major versions are available</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6-1" date="1741953601">- Set priority to same as SIG/Cloud</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 5-1" date="1741953600">- Enable `module_hotfixes` on all repos because SIG/Cloud Next will not use
  modules, and the NVIDIA repo modules can cause issues if it's not set</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4-1" date="1739966400">- Update URLs to reflect Depot
- Update testing repo file to reflect that it's testing</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2-1" date="1739793600">- Initial release
- Ensure repos are %config(noreplace)</changelog>
</package>
<package pkgid="7e3be0a5600410ed3ec0fbfdf5106d9c3033030d6a0211606f4b2aef387b8d45" name="ciq-sigcloud-next-release" arch="noarch">
  <version epoch="0" ver="10" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 10-1" date="1759147200">- Switch to using rlc-cloud-repos plugin to manage DNF vars</changelog>
  <changelog author="Giovanni Torres &lt;gtorres@ciq.com&gt; - 9-1" date="1758801600">- Use dnf vars for constructing DNF baseurls</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 8-1" date="1758110400">- Switch to FIPS-compatible RSA 4096 GPG key and new repo location signed with
  that key</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 7-1" date="1756123200">- Update to use major-version specific GPG key
- Ensure all GPG keys for all major versions are available</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6-1" date="1741953601">- Set priority to same as SIG/Cloud</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 5-1" date="1741953600">- Enable `module_hotfixes` on all repos because SIG/Cloud Next will not use
  modules, and the NVIDIA repo modules can cause issues if it's not set</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4-1" date="1739966400">- Update URLs to reflect Depot
- Update testing repo file to reflect that it's testing</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2-1" date="1739793600">- Initial release
- Ensure repos are %config(noreplace)</changelog>
</package>
<package pkgid="20b3c13ffb69053afe1d8faed673aa96259a20d2b704c123c53161447676d82e" name="ciq-sigcloud-next-release" arch="noarch">
  <version epoch="0" ver="10" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 10-1" date="1759147200">- Switch to using rlc-cloud-repos plugin to manage DNF vars</changelog>
  <changelog author="Giovanni Torres &lt;gtorres@ciq.com&gt; - 9-1" date="1758801600">- Use dnf vars for constructing DNF baseurls</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 8-1" date="1758110400">- Switch to FIPS-compatible RSA 4096 GPG key and new repo location signed with
  that key</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 7-1" date="1756123200">- Update to use major-version specific GPG key
- Ensure all GPG keys for all major versions are available</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6-1" date="1741953601">- Set priority to same as SIG/Cloud</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 5-1" date="1741953600">- Enable `module_hotfixes` on all repos because SIG/Cloud Next will not use
  modules, and the NVIDIA repo modules can cause issues if it's not set</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4-1" date="1739966400">- Update URLs to reflect Depot
- Update testing repo file to reflect that it's testing</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2-1" date="1739793600">- Initial release
- Ensure repos are %config(noreplace)</changelog>
</package>
<package pkgid="64c80e24749ae1bb23ff0708e5b6620cd0332e712a5b551802e35f22cec6cdef" name="eglexternalplatform-devel" arch="noarch">
  <version epoch="0" ver="1.2" rel="3.el10_0cld_next"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2-2" date="1725451200">- Adjust path of generated pkg-config file so it's still considered noarch.</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2-1" date="1723118400">- Update to 1.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1-6" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
</package>
<package pkgid="23e2f299fbd56b0e0f2581f6d8ba440f5bb9d850dde744a9eac5ef8024b8519a" name="eglexternalplatform-devel" arch="noarch">
  <version epoch="0" ver="1.2" rel="3.el10_1_ciq"/>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.2-3" date="1737028800">- Rebuilt for https://fedoraproject.org/wiki/Fedora_42_Mass_Rebuild</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2-2" date="1725451200">- Adjust path of generated pkg-config file so it's still considered noarch.</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 1.2-1" date="1723118400">- Update to 1.2.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-9" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-8" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-7" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1-6" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1-4" date="1674129600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild</changelog>
</package>
<package pkgid="ed52f8abf14d2316154d7e0081d93838f3849de9bd0e07def8a252037e88c54c" name="egl-gbm" arch="x86_64">
  <version epoch="2" ver="1.1.2.20240919gitb24587d" rel="3.el10_0cld_next"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.2^20240919gitb24587d-3" date="1726833600">- Update to latest snapshot.
- ICD is installed directly from source.</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.2-2" date="1726747200">- Add the library ICD (moved from egl-wayland).</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.2-1" date="1723550400">- Update to final 1.1.2.</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.1-6.20240412git649c079" date="1723032000">- Update to latest snapshot with required commits for driver 560+.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.1.1-5" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 2:1.1.1-4" date="1709121600">- Add an epoch as some fool addded an epoch to their thirdparty repo!</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.1-1" date="1704283200">- Update to 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="60554c199e402863579f0b43f665ae552edad0fefda9b329a7c438a86a058e36" name="egl-gbm" arch="x86_64">
  <version epoch="2" ver="1.1.2.20240919gitb24587d" rel="3.el10_1_ciq"/>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.2^20240919gitb24587d-3" date="1726833600">- Update to latest snapshot.
- ICD is installed directly from source.</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.2-2" date="1726747200">- Add the library ICD (moved from egl-wayland).</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.2-1" date="1723550400">- Update to final 1.1.2.</changelog>
  <changelog author="Simone Caronni &lt;negativo17@gmail.com&gt; - 2:1.1.1-6.20240412git649c079" date="1723032000">- Update to latest snapshot with required commits for driver 560+.</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 2:1.1.1-5" date="1721217600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 2:1.1.1-4" date="1709121600">- Add an epoch as some fool addded an epoch to their thirdparty repo!</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.1-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.1-1" date="1704283200">- Update to 1.1.1</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.0-5" date="1689768000">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
</package>
<package pkgid="883c62ac71accbfa872088772234f66ba5fe31bb8c70cbaab0c279f6a8028045" name="egl-wayland" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="2.el10_0cld_next"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.16-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.16-1" date="1724673600">- Update to 1.1.16</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.15-1" date="1724068800">- Update to 1.1.15</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.13-1" date="1697803200">- Update to 1.1.13</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.12-4" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.12-3" date="1689768001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.12-2" date="1689768000">- Add patch to fix rhbz#2223856</changelog>
</package>
<package pkgid="2d3de981edad0980b04c52ca63b5a594af425432c5596478220edf01b6509cd8" name="egl-wayland" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="2.el10_1_ciq"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.16-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.16-1" date="1724673600">- Update to 1.1.16</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.15-1" date="1724068800">- Update to 1.1.15</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.13-1" date="1697803200">- Update to 1.1.13</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.12-4" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.12-3" date="1689768001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.12-2" date="1689768000">- Add patch to fix rhbz#2223856</changelog>
</package>
<package pkgid="99fc5887b9c55ea81c8e496b98c04abec9ff5889faa258bd29ffe0ea134fffa9" name="egl-wayland-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="2.el10_0cld_next"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.16-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.16-1" date="1724673600">- Update to 1.1.16</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.15-1" date="1724068800">- Update to 1.1.15</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.13-1" date="1697803200">- Update to 1.1.13</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.12-4" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.12-3" date="1689768001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.12-2" date="1689768000">- Add patch to fix rhbz#2223856</changelog>
</package>
<package pkgid="4fdaa6bb2aeecf43cc3d9be889f0ddbeedccabb678e1383ca2e466cee95595f5" name="egl-wayland-devel" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="2.el10_1_ciq"/>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.16-2" date="1730203200">- Bump release for October 2024 mass rebuild:
  Resolves: RHEL-64018</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.16-1" date="1724673600">- Update to 1.1.16</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.15-1" date="1724068800">- Update to 1.1.15</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 1.1.13-4" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-3" date="1706097600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.13-2" date="1705665600">- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.13-1" date="1697803200">- Update to 1.1.13</changelog>
  <changelog author="Jos&#xE9; Exp&#xF3;sito &lt;jexposit@redhat.com&gt; - 1.1.12-4" date="1694088000">- SPDX migration: license is already SPDX compatible</changelog>
  <changelog author="Fedora Release Engineering &lt;releng@fedoraproject.org&gt; - 1.1.12-3" date="1689768001">- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild</changelog>
  <changelog author="Leigh Scott &lt;leigh123linux@gmail.com&gt; - 1.1.12-2" date="1689768000">- Add patch to fix rhbz#2223856</changelog>
</package>
<package pkgid="52839405160d41cc0f22f3f4d5d382c32ef3f47795380bd64474b5bff8366816" name="ibacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="f5104eac6ef31636e86f1e1536c160e3563238f35305ea6bf3943ba305dc0f5e" name="ibacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="475b77e2fd35e3b367203dde3cf1651379eb5e74500194646132a8775c53d378" name="ibacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="39395e75a1aaf3fbfd0d816916fc67385e62b086d4ad84eb5a25eb3e5e9a4fe5" name="ibacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="a60513dcf0b0b337a35e1c94371b037e588a8092472d33e49e5227e1b5cdfe90" name="ibacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="cf9fbd0cb7e0148093d930fbb5dd1945ac7899424e745b640071e50c683c751d" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="c47a0a631073c7ef7709871c782bd5427ed2292bc9f22ef9efbd1ce2044ab040" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="d7c7a6d2d1f52adc57155b2558810b83c6e092732cd919a588fb8d9ea5960315" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="3c8f1a7c9bb5b65400f1426b80c53257ac55f06b485aec120830c3b9405ec333" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="9209abcce947ed18ca6931d8efe5277b68b6fc81261583f7848a2880a7836e91" name="infiniband-diags" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="4b8a7ee158e38a18ef3b8a262814b414952ef01a395b648b362f5c772d942248" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="6716e856b6a0fb72d338a3590550275725bacdd698d5d2c24b48d3a339a10d0c" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="ee0eff889002175616efb2bc8d64179b47e479b7098f890f62e3d0f846cbf59b" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="8e219735b11c50f2f309b4738840a835df3895c358a01a527e23c812cf49c687" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="e379562ff203ef4d658d4362d30c5201474de3b4b13ee60bd01c1e08c016e22a" name="iwpmd" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="c2cfc0e1828ddc57700f4088452daa4ccda0ec3274ae9e16ca74eadd0a6804f5" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="098c2ac30cc65007ea868005fd9cb2811459e0cdffd7a07d801a24c1625d169d" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="04b0a7395bc90e977005c9b9f2b811a3ea2f8e4a7a4a85558bbec2cd2ecd8980" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="4e58f53c9bdaf6f1f9555947fedf7156b0b548eb2aa71781f3151c2f6e46f80e" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="f2c9c5a99196e148cf57e73245af2999055c33940d290d2e3a7f4457d8be7054" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="cdf24bad0f619146e0dcc7588485d4542e8c4977928fff6cfb1cc14ade9aa9c9" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="4e9f7e9ecae238ca88c298932f58605bedbbcf8753477b0bcf87367f0a35d1eb" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="a611328ba3ac116155b886e5b2195843015a97502cbc755ffdad0e443d57eb38" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="a7685e88ff45b5a862461d0f03c8245917604d852e507743e32a5105294cd7da" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="213edc71092c77c2819aeb8b86e4c6c351ab17f698e357ae638bfa5b5518b8c2" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="3bb5837861722bde7cd5b5e2909a95a6368c286afc871bc004b9f83819ab9a44" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="ed83ca37324978ed00a36d782347d9fb3e4cc960c8be6f5f54a6d19054a50766" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="7d1eec5b2e6dd291468fc97fef2b343301793d55350bc0c45a3e2d85d8e42f0a" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="0a661cd3de57f0f2403492e9dd90df029db4b4ec026e6206baef3ce20e5216f9" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="139628bfbd188039ee941d0fe8b6c2234cc6726456b2c86d65e5dda3c822cf21" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="f9e2d00bac4dfba5ec6dee4697ee3a6c4e41b8f199557a03b86d620f2d723ce6" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="96aa2e6fdc952d1a7cf70dec5862a47485163b84c14c095688e5f601045edcaf" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="081d4bf58e37c94f496fb7edf0b680f74060d1c7d04cf2bb9cd06341f04e3be5" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="06e2c72eff26757cb2de9f3f1ec08c9e5eca9a89c618bb9951a94e4a6de361d5" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="e65b909579abdcf469eb14a9f4927bc2aa556746818b52a8e4a55adef0d9ef64" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="9c74bd0060f12af88fac60fd39da7849a828f11958b72172632819c5b005c521" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="a4553f1e1657fb3e4ed73b77530f6b55adfe33c9e31952917d0619fd6977b196" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="9f804e1bd051087d4f02db2ab7448fc670a7dd2c57771ee82c6943b9cb69995f" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="ee1f0595cdc2b2f6e72ded1b6ff6a0e78445dddad6057d55348b4e40d09ae9b3" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="5446b5200cce50770ca3ef996c040a667eadcc3e04b5f7825bcfe38258ca5480" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="60043efff9abd257b7fe8617c09b9425a7e3a31ac9d9181ad16110d3bd8c837a" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="bc5ee9142d6731042ba4ebb5f52e9709e02a558fefacd2a1f1124a3cfcb7a110" name="kernel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="5edd0692fdb8506b3d4a4312fdae4287f8773fc7e9db80d0d2946120b3f90d89" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="e2599f5a22a62b9bbe576188e6a7163ae2f880e3c8865f945703ab7084823c93" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="98c168c33f22bd060bbc8b466eeebefc99d6b33191c61551698bf2c0ee2792ca" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="fbb1e9b79423fc397fe1de1ce3fde9f790173f62f683e764be47b0fc71a11f10" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="89ff173ebbc01f0999551880ae66baa8b667ff35b5cd7565d14e738ab34f68ba" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="44a5342ab30cdd44db4cbd4f81d98c52c600d1708db33149cab383bf158b5121" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="110b679f8b316716b820eea3b96c5891a6e22770ce11adc098f9ede8a4d8eb49" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="0acb43453e2acb1b2b999b635f97cd16727d6b681f171eb2ef524c63e33358a5" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="7e9d6b713b59b52df1cc2a4988320c1cc25aac7d028bf3712f69f624e2b4697b" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="e98430de8ffaa331718ca8497fb9e194aa2b447d66f99f3848635f3ed75c4604" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="da0d8d2e8e8a54daaaccdbfd53bdafa02b08f7cd23e8f7630565a41a9fe55364" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="59adf0812f2b9bbea5bee70e71e06e074071288add266e64dafb5032c79b3d14" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="eb5e572971eaa936d33eb1f60b0fce03722a0355a84a5d67534ef3d45b85c11c" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="62b03ed681e19f1b4c689f6b092b7982750e3eca63c83231c474a4530318293c" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="cd8be3104c17d0f1286bceaa0c7481f654b4ad492885557ea08995da7252e459" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="2ede5c6ef5b4d7dba94357d8fac25154aeec7188b309a5484e65022078f03b1e" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="cbcb36806cd799c560dca9689964a7159f39d711d58bcd071fa7b599933d5564" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="5adf2296226b9dc0b1465f17aecb4e8bf86eb20f7fcc7cf5d5f37b2bca99b14b" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="daa6918dc90da9922cca440f3709952d221ddb53ddd1efadd4664da24387fd94" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="6f4bc56cc3e640a927bbcb78cc58cf86e6a3c8666908b9a64e238354969e0326" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="2d690b8728baab6f67334f20f2dea3a504d78d7641f021fe9391f59f5cf5c514" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="37436912434411e712b8e5105db735a154cd5914a22941b39fc4c3ae2f412dc8" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="3fa6d3dea4b8e685959cd2fded04f64d1cd8dc4baae335ce9e9563ffed8791f9" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="4008cebd6c5735d0be5a49b05cb653cc1ad6a5e94263520b1a47bbdbf0ad5ed2" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="dd59699f4948ae0f50de0dc65c26baa9bddd872c7af0039b4b6313d0d309df87" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="726670d4a56874193ee15834080f5e26d1343ad1e3015cf8a22ae2dad599f650" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="2824d0b32bc22bbdf2ae715880caa73cebb65b23df67af89c2060f31ca89f830" name="kernel-abi-stablelists" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="568c4fb01b9fb4deca1a3ab977525fb263219e5782c37c4ed09c0e02ba151d8f" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="d9ec488381e5e454da1c60f05d3e17599d837aac160d27571971b265f8feb1cc" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="0d1105d23e42bd85ec0fb4b585cf5e296185f6758a1ce2545e6b4c53a455c211" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="5b61cf3f52b39e40aaedb753d8288c182df89043e93d3d45440e4f3d1ad42030" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="edf845231dc9cd04a82e7120b9076a859a1c83a731f54f28f423bb9a0c72d4b8" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="65210a99b9e81ef66ce3016506169cd74fe249398e09a7ce42c578b9f42e56b4" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="93e497f6bee91ffc6f3abf91ba61759b695df959798c7830316868743360af52" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="ef21ecdd48a6b85a6d9da6b0f71cb2a561894ec94506e10a00c726a9681d6550" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="7b798ae7bcf41fcc8c8d597b7dbb130a2c5b0dc92f8bd83da91776acd7ffe741" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="e69a9707e3224f74f36a418f1c52cfa4b7135758ed3532a6f8eca20f66a464bd" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="ef387e47495dcb6358a4d76a5abd6701eeaadd0b4d363e9aa44999a8e8f1e1fc" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="61ad584eb50eacf0bb6dbc42bbb70821ca8b3f3bf51c42fb249f154d8a8decad" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="70d539bc9de0bb784552ad815c869c819724f33380442c370c7a26480fff5705" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="3faa8bbddfa71954e8e15d0e8c7bcc7d563ca242ffd8f1c2052b05c9cc0f3186" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="c4c1de3f6b400af04d57b5e03772c533cc5e02a19d6260c9deac9a3104c01ada" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="ef1f2dca91afbc7bccf12b37660dec1ea5f81f1028414f98c562340288354ec3" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="a9b841b088a49d590ae054dcf1b92173fcb1282fc0c0f5548d8d20bac3a2f2ce" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="b822b9118596ddff1db9d6c376174eb18d1af5341fcf3cf335460de1666a5339" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="474793fe1cf411be6207e5135590f131480e82c8ca6a3254b75386167d94b3ae" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="dbe31fa6d43ee21fb1bf6804a78a97a07c6d95bda926ed1433717bf89609b54d" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="9adda2f696d709a0ca9728b64885bdffb310a3b48de32e979ff7124458c67f22" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="06ff3a31fd05482dbf25c7779935156abc97d8a6c549e8f301c215fcc48391ac" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="a2569759d14d561aa71e22f39efec3c1e1b729d99fd6b4952bbac487bdd2f342" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="dc0dc7d536fb33e69e68fe1b5a31a2aaee3e5b1514de5ad88ae77cab8dfe2dca" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="8f82b7ba334321777381c2093d5636779c729d35c51f44d7c9fca0d1a90c5613" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="ee3ea6c9d860f118ed85ebcfee18424c74872be133c7b87d15acae1bb6dc85d5" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="0ee2ad7652c46e5cec05d7d85e25f19dfded31efdadfc28cfade74a2ab548121" name="kernel-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="50f685d9a79169dc4712c4a04e7cea5a83938cc95bf791b0281c87547b6525cf" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="83e4edc1cdf07d3b53556f22e1b715bc473501d39b95b13720c407f058f72ec4" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="aa9aa436d8ef069c28990f779bffe8e2d66fbd166a1835a367892be2f65db4b7" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="52ead9d4f10e32f76293e4da484e68e309f6c6764cca13042aa082be787af574" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="cd474b07c0cdc65cb73ceb9c6616c0291a5a2a544cd14c98068a2d2ffebb7532" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="0ea69a07f70ab985fdfe96d2acd4f7abd2ca49104cca8ab0f867e9f2b224ea0e" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="97df62e6dc20432c381a8d3af87e251e28686fac9a044d7d172ada3664102c83" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="1931176220fd21bf8eca5c79596fb5c0f2fc6f9a6f4645cba7104b2053cfddb7" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="8f91c1fe356c510487fd57d947a878f3728b02e913b98a55c1a6c79dc3d9783d" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="ca654cdee1ebd9db3b9a9bf1ee651a5ea9291876a1290bf6485282bb913b112d" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="3a294a20527a1a1608bd17208e9f740b6a84855806181ad35798a17b09c72511" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="7bae60c46b9a7b8d5c64c74fe6b1333c4d73fd91db2236ab066f7f66f6566c31" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="7a457bc63f358b6f151cdb41e2d4ae1c2ca1062ae0814f54d3bc4cc20beead91" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="5a928635d8c3ebacf45b58bd7dbda74a262984aff7cbf4906c20f123130ebf76" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="d10dc1c3bb30d0b0e6c90158c2c1c80fcad33ac4f0b926d9d4a916b9f46a096c" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="8b2cf7c326f6b4294ea245cda8b5df40a83101ab32b7066eae73bf0aac1a7f92" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="fdb869822af53fbac97d2cbce55debe8b3802c5be06af7c553b25f3a9dca4b71" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="cbbe0a1a230cf9c72912175f548ed38ea2816df9aa422581e95aa426e97748aa" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="b82579b9088c57d4d652280a8464c8fb165acdf76c32a4880ad9d2866ec35f86" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="a7716fa9840bb16e5f52f7bfb3bafe0eaae0347bb216fe05edee6f9e9be9a2d8" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="1fc52dd0141f46b4b077c7330f168b9e98a905c29af731c62436f1bd5f4b6b7b" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="10584bde2271a98b7a6bf5832dc37ad9a83bcc7af31db9c654b8dc3f66d5033d" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="bb7df8f28804a36b49a15e6a7464fcfe384bbb5735d53bf836a27a62a94117d7" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="4dbb395a45c88ef28a52ae7a189f3b1bd19c5e4a967b7f30b24a2b60f3c22918" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="5f208aab2e5900f3a9902f7b860ff18e7652654087670a9270c5963241dc641f" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="259f00e4828d57f10b997b76aea02b53dbaba0b79db4b02723b4f513779d16a8" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="a5107c61cdf04b0addcb22d47c30e1d8ef00a42531ff13aea607a1e5e0b5a229" name="kernel-cross-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="d9a53450c0c0e25d001d4549878fa6f60b32780627d0fb3b7596ca392cf6ea88" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="1114c044c9196de426c755078af546256ce1960aa852ea4a124a2a59d156b286" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="0d317c980908d47b796ddbc6a06e7d572578c9124b685f9050313cb14c4a9282" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="df2e9cecb1ff890a589bbb216683a9a95adf3ecf01334a394deb2a98fe860c45" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="610d890fb482641209872713ee17d5a7cb09646fa33634b2051b2d2a8c9f5079" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="05707206a3dfba1541ada836b9edc755f97cc10f8a6f8dbb8ac0a49dbe733381" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="c05a371570ce12cf73d34aff1762b82ce4ae82491875a5977c62c17ae076e946" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="f4a1a4064e57d5d9e1abdb80931f54b0bec599b604b527264beed61d9bb2a139" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="cceac174d0f20203562e267b66fe965020e79cea40d2e1fcc0129fc324441b6a" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="72ded9f96f647aeff2306b62adc0c67046a823f60052217b1090c97859cf4999" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="babce47fe2e020c029f60d67c689a3b8f5b3eeee02a8186bca65b9f11da36754" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="b95fbc0572db852a0fd4cdb13e7fa495c635e110012e7b3aac1182b2a0e2b369" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="43314a9bda887f94cd3cf452fcb50d8e36616ccd2fd3ae04a0ac2dd44ed92b89" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="97911a445e11bc8f4b4f62bbd9e9a671970d2ab34cd4e75ad82a4cbb0bb1fd37" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="1fa41f20867b707e74d0dc4442175cd5ac26058f274befb9763a0eda2ebe59e9" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="1e876572e5dde027b38d30bf2fbbe3b7610b8416d70eb12e05c8ec042c057bdc" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="e69d7a08286cbb5e0162c8b1b2b25b3df1a46ad464a054894eea0437be890185" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="61735b91b065882b277ce62469325789d02448cc736259dbe7b3ec8386351998" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="df2c2c9cac83c4cca7bcf3a30ca45b1ec8d5859e9b05cb4df528c83bd6d80acb" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="859cd12afc1b02f381e27dd235956186f95ef8494c04f8fe06c40982b6d5134c" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="1afac2777b1183d0f7a12429aff7c83cbd2b53c1f9108e5762943a342c021d8e" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="fc2e857cc837130784da156dc7b10d58c44f732d952830bd872eaa50c4a48de9" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="d2eccb706c0aca81ce80c33add12b1b965551718524f51b6e856f562bcc918f3" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="65f9c9370115aa20b12624d0c771357a85dd6a4bd79afeaab7189e67820dc4ec" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="49bf715c79a7e29219c02389b7d0de53bc7d196bd269b8b109ea895e89ee9449" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="ca81ffaa3e524777f850577aa647f6ebe7c61baa4752d611aac807b6bfe3b7fb" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="0014f8260fc34dc4647516f3d864bbdbd00b04a0e754f9f9fdcbca9d02bcc097" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="2de4fe12bac3b654fb0dc4c7a24081141a91d6c70c773218411557cc1b690f3b" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="fd4c5674175d9f35a248ac460f061e03a5152e65662dce31896e471d76b34520" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="c5c3ae2cdc0f9204f12a6d6848d58446316f51db53e1849895761b03ef3bad8a" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="93d29f70f3671c5b92a9cd27b9d124e3f08a18328d6bf02b21021498f6c6be60" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="edfc164206b551fa97c57cca086e4da4694780495b798805c94cfb4a3ec16133" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="d8983061c8dbd0bec51ed0c6988f2d4453d87d6a0690856e10a01642448afa51" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="fd57c8493e9f3a4606c246f05bba19d8d3eecd1d696781c951fc25242563acca" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="e94a8d3de7ec63cb9ae7a7b2b0884094dd3986ebef7d55f6634e1b0e9875d5b2" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="b8edcc0304d4a7359c03982ec7d4172d0d760b8aa7ccc9a8d1c9b06c261b5011" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="7d898e4961b7c373b632764c88c6ebc9be18b0eb9067e6868d65457da05a07f3" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="e17e7eb44bacc050dad97298c2088beb006e4e59b93b70f2285324ba5722f2e7" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="9fb8e4fa6b2f8870b73894349236a0b44a57da1c68c95967a11a866c068a3c70" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="272792665672b86bf49163b086f90ffa77bc83acadda2264be62de51ed97e5f4" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="e4e30943174cac94f3926f710676064cc2cebf9e4e84b748ee12cc238e3a68e8" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="7088471bf7aded48ec19641e6261b5c64081eb3c068f75ca4d78ffb28d57a287" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="e811242a5d85479ac151ad46cd9d9ceabf611b10cc1b9c33da69bd4bff61fdbb" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="3c3363f0cc27ae341e74b4909f3e07df7ef45ef5fa03fd2228699c86ce9e91ac" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="eddd00cf37c4ef393e79a03985596e095ffd9c7647f299c45dfa7e4b3646f190" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="b1acbb049eb597d81c310de072887b3cadd1bf7d260be498438a70dab103fb8d" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="1a04f30b5d58063a969915c0b0d44fd5886b4063d212c53001ddb4a0376300e6" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="75cd48216a6a563cde67160b301f6f71d9c9b6f7d394b7c9502a6084da0b5d27" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="2afd881283e7bb76a00a0f94024af9a62f577bb311f3d388d56700674e520843" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="4c934be9a8235c30e2c08dfb87a11db6bb09b525e5874344afd1682785acec11" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="d34ca3eadbe78c99e753f9fb76e90b616bbc518523c3e072431c7aad1d878346" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="40c013fb2b2cb0bb0494e2fe061fa2bdfb7c2ab649cb1949ac4343cb544dc2b5" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="11f901fe7bc69eb4108932ba045395b9457f9d541183c85833e13ff4ba3696ec" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="24a073e02c4a7ad3b2e75073d2f0e8c2febc669d5e8c4f7531a0c134d33598dc" name="kernel-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="b7bed24eed7eb93df3972708157a58fc0781cbc1d0c155cebb2a35b3b5616ee8" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="bd8e322dbad82393db445e31ded354bd59e5b94c08d1fa8b37bb177cab78eaaa" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="47580b30cab286ac923cf575059754a2124849e696e4e2e1847fa0e97c9b1416" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="706474a02a73863f37d2024aeea837eadfd4af82a513d09f41ea1b2cad82232d" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="6e447833e38df7eb92614757a0421a0716333558dbb4e1e898fb201d75c700e2" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="3c21d8c3edd0b05d8dc287b84bb50cc8e6ea764302d2eeeb53ab3e9d9be1728a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="1bc20fb5efdcf25bb91e0a335db9ef9511542c2abdf3b64a18caf649b3037f9a" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="89a2a337b33fbd16477fb631e3ee4eba355657519e3df0dc618d836afb46fb24" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="4e8c3d91fda8908976028e986190e104c86ee3c7c78ea5df9aea94e1312e4c97" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="78acd8eeb979dcd6c9ad530f6274c65331e3912dda892aea98162645a67a7eab" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="d567c63e2eedab44fdf639cd971efc107503ce202a7e1cdc6483bfe18363aa5f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="a54c5dab408a1ba2c1ebbe69c68d8b33cea3a91d1548d027af532105a5ce7dba" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="50bee07dc9eed20dea5f63f5a2d2c1c8a8e33be395b8bc4aedf4fc3bd71e871f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="a5d3a36581ba71cb5ee6cec151092488cacff4a34a677f2cdbce028942fa8086" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="929f403bb6e0c2c4e42c7bf0dc72b8263fa67cfeef51bad8db250b8926b768e4" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="2c3a98f5d9265cf4dac860480aa4c07a474bed0338ade4439bb663c59f139c1b" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="d2c8f1a622ab5d296085fb9292732fa473c08b480cf62928ddfc696855087871" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="2b6ff29b2c74c68055f52e15cb250a40c96c53f56653908c3960af398f822925" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="998ec92f74810c37631a5bc2df2ab5d929773080d6591c9925a0c9614ca794b3" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="715a4770bdcb4c8d5906f3a4bc8071ebdfad293e4c12f7914a571a2eeec80107" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="5a864ef424b4712e5c08923568094597cb6279e112742b3a6d97e7aefa7752d9" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="090261a48fce59f48d98a52f3bd13f37ddc8e3a69fba3147e375965daae1b823" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="b97f6fe9d078425c1b24c2be24da616f929747b91eb5f41c7540848454254f4f" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="36b679e4c8d89c20d601b192bc99d833e98de9239c31e51f5e2f223b045d3409" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="bbfd97b93de12ad000d2485554668a8acc9114e2a7727c23f30aea895d89f3df" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="fb1920ae51d297f2896f9de36896622ca2d5659684aa577176a1fa3d48c1b2ad" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="c0a67e59c4ff94d60d37d924467dfd3db07d988ba838c17248e29bc961a2d1c5" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="1db9f21b86f94faed6db6e38aa2d5107579b9fd0eff4f9f1646c43bf134f976e" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="2ae52946b1c0f6ace464a90d59d490c273bf95d301ab5e7ffd600781fdb8f342" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="23693b0a9c392331b2c55f77183d57a173576ba28379e3b2ac84d0a1d9c31310" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="5c6a8135d0374772d83256c58ce03ebcc12ded6c609d1ae2f17eedb94d12013b" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="af85929bdefa7819bc6ef81aa4f19b91219e8c8782d37d6a03d818eb6815e2e2" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="77e64196bf6c6d3512045fc2180f99ba32672319636dca313da23ef21582a3f3" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="0c2af2736ccd8c28fb730ce9a7cae23545ec5c63c08e237291eaf92435fcef2f" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="2c00f5963606fe1f23071865506ecb10abd88bc605b1f557b01298d7cad37427" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="fe0f30963e9a4f47ac7546005e278ee9c6ffb45d5d031b033bb5a7c97bc2e97b" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="800d325386acf7dd4783c9ca47f71c387d59d2f7270f803fdde72a13b2b2192b" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="4d86596510c9fe4cbdd53ccfb6ee583767abf648de4ae22af520aa59ad9a95ce" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="1ccc3d4bddb232e052d36eaad1eded391e7ada2f42e4774f1d93c937e2e653df" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="854fc1d54f9f6782f375a07e158a136faccf6300bef66cd977550aae4ef2048a" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="52392de876aa2183156576e718526fe620a63a9c195cfd3785542e5691ef8cc9" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="5e8c6e17fcb36f2076d8fd872d9fba5cef5ec669209e05c66b8c992bb63adee7" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="b6ae51e366d29320c29a47aab3d894779373825dc9cb442a871d2af256a32383" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="a2a72c2895202ad5596475dacc0007a81078d67410548c68c740750d9752def3" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="dd38a79bbfccdbffe7acba4631319324b362a67576da17dd7ec759df35dd44f5" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="a33b8ce14ffc54c6d8cefc5cefe3569352fec50494ea90691e7d36025345a3e1" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="f0121cfcafd4a795321013a36c265df5c9f690793ec3d2011d2846e040f0bef0" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="eed68626ad462067992fdb5cd989175fbbc2ee75671f00728bdcaa5bd1aa7862" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="292f096a64d5d12e32c3d4f25d28f2f86abafe44ee7dc7869d661ce8038b2f1a" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="cb4c850bf386da8538275d3242b9e2082634ade1c87d09d1529adcc603db4e86" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="6ff72f6978ee78af7f08f1697985538d44182847f26f57f2789bc9472316a42a" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="e62bc8ca7cf9ce90a33823f38494faf4c95538258f660c64a22d8b0e2208ed4c" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="bf24755cfa4c67279632cefce8aacd2b1bc5e092cced933c5b6b448852e308f5" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="4670ca6bf2fb485805f128581c2e9f26c3f17658a9f3930e5c4a92137680fca0" name="kernel-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="52cd0d9d16b7b53c914eeb79b0f516494cd40b507a14b49af74e8a7409545d8b" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="13f1caa99c942a9133cd2a288b9161e5aeaa53829ec111ccf1ac96ebb6e65045" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="365f589279cc88d1142f3b29227bf25261590536c90d4cd18505332ac91c73b9" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="88fc05411ff87878f000a2c1a0f057f2afdbc3526cafcef33bf76aac077300a5" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="50834d9e967d66912cb6aa358ab1b28cdbd1ce017240ff86531132a57cdf8352" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="a53afb29245e32456fe104268440bfb13cacb515fb3367bae44a60ad7188d882" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="f8ecb657be911076f9dc3b7842c0977066324ab9afc04b73d8a013e70726ce34" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="6f9a327820552e9ebc7c57a877b984f31ab410b0511ae84bbad58e382d440cb8" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="9542c0f773392cd68681636a1dc5c37463a222e9e2c89ac62ec0d87ac38a4db3" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="1263fc717f34e040cee6d4236a0be9788cbcc89c086cac441b11aa7dc22417d7" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="7cd6f9dc7d7466c3cd77c35416776660f012c828003ca248e7ee5fa5058c5b50" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="a96991e2fd8230eb6d020d7ad126f0c7c753f943dae11c47632f98d2d3466077" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="50e2da9bb4ed87f6aaed7c928fac38c98f5f324e8dee306d6ef323df29d7cff3" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="43b45fb616c09f33d75e5b488f3074c7534b29472ffa69dc38cc71f00298846a" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="9341e7f9c764c37440bde54890c7f0813cd203f552a9f6c89fff934829e8814f" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="0ef7850a9e84b1fc97e401f48da9b72c92586329a2782fcaa8af6d0e025c791d" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="d1fb303a887b77df96fba8bbb8f0bd81d41f91f9882b5f951a43e12b4da6476d" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="f8513a93291a390e8a4f987e3404fce9cbe929371922358fa3a968f1b3820eaa" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="b7e53e1a352abdd2143e4146aca956e21e2f109e98b9de39d685e7500b98ee64" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="2e610529f61dccfec241236f6946f6851837e49266fa3caec4ce53b4dcee3fb7" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="0ccdb140bbb443627ce21d5474c39d21cd80f25bc5c0228f3af8b8bf0e842464" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="d6ec321c2f69d844d76a9953dffc3fb737648904c5a5e51d6ca5c0008b05df63" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="f55687ef15449780cd3993adfeb820d9900934e2c163ec758d1fb811680f8412" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="5f4d89b2c3f2d9905d827bb06363c401d36082a4350b921b5f8021227e5c3485" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="f6e02cb32e1fff7b805ead794dde52d11473b708ff9d6584d12d0af3ad1652d7" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="b8369c89ccf211339949d96509995e49429d2b47cb32b6646a0ef8f74e57da15" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="78dd8e81d8f663da04f2c19beec142ae1ca0e1fb535bedfcfffbd0575f790120" name="kernel-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="a826c1bb7d773b75bfcecc654dcef34d7c3b21abe0d3a284a7c6c92dee6159a4" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="1835ef5b88e921c0fedd20a019e8bd4d9d3747a009a72d235bdcc8727997a996" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="b8a1530fb0169a06d44adb191e2c12d9ca7fb0dcd4f30e41158aff4ad991ef0f" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="39f13edb9e6acef0b888ca856e1802d977e1bc22670ef0a2d2b7489e81a6bbac" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="0bc7ec20f7d8239573ecd9fc58fcd31535b2b6b961f6d2354ad6d57359545c79" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="2cacf9adfe10f3a2418e6fe23bedbef7b91d9c7aea650af97a220d07728ddb40" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="366a16df091a77d0d86e1697711795af92313ce5328ddaddfe35c63012b4ef99" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="70f30b975a50c6c1f50e056038fad6759de70285b8fc21422ac4e909a10d5c7a" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="bd502cc7667f5d92dbe06110611d7b2e7d47b1848cd9049e3836d834764cd57e" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="45bebf8b5eb98ebed616c1b249be4c41571006ed416d7928fed51828ae740e83" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="320bfdffb5381f61d43f55b524bf0dbec61683da41ecc297b447dde5eb6264f1" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="d5a4b839d31fef2272adacdd89497f513973e8da17b347b4125c93a43f29be09" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="20058dc2c9205fa5a12eee8c91980394e85f85cdef813a5ef8afc8d8c21a188a" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="0bdbf490ed7e8a560314744c46d7d32783b729eec381f4bc84344179db4b34c2" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="492ae69f7046cafa75e5443694745955f2d91fe40596b34eff7dc230c975cf12" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="61de8182125714aab083d23d7dea7987c58d20a8934db9cab7673141ddb107a3" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="341fd927a6ad92cda0791b38ccfb9fa0bd51496b0c8d32c315ed2f9ea145b73d" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="b34edc7d449c3770d1d56f69e6594a694acab752dc920f9f8efb8e5688db46d0" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="1e374ed5fa69dd41187ffc0fe6c29048e33941a11a5bc2b951ef1a01285935ea" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="7048b445cc97704e2747b2ab31c831a99aacf72a469a0d1293a1c2e05cab4693" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="5987588619909ac95e593bbff3439ecc24fb42594bff113bf6ad9af199e1e0a6" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="f0c3acc4d0bd93ea834851b47168ee122ef1f768c8be9eaafb1b4cf6bf19349c" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="8f01ddc0c6a786ecd9b0a6066c9d98298227e0368ca88af8d33cd6e28f4b36b3" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="29854a0da6daa1608280ec2f5204d2b563c946e665995d650310e003a253b304" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="198d73b7d98892b4836ba4c9f372386a054cb8f301f3965a4cd052602ea884c3" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="e9edb928906a817f79e5602c38c77bf0ac41376d87f633cb7caa3301b234de71" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="3d5c56960e59b20758be6752342829d2648d20842b49cd06f832106fdbfdf99c" name="kernel-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="8f9f965a97015da1395c1af6dba7bf278d8aae7442cb0ba3bee3d417583132e0" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="4b90b172ec4bfa299faea53ac96827c1009b409d891c9ed3bf1ca33fc2fa4cf3" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="f6d5da75cdbfb52806729f890482e51bb2c628a0bb60279f4f56923cd1f41099" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="59a92e4f695f6bae8154d176d04964bd5bb1875bd3c6813c0379c125c05570bc" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="8cfd01431ce2e8c9917a7b2dc40561ecc6ab1bfdb7fd16a9cdc2d2efc427db0f" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="fb66825706b577ab06ecfc054ab47838aabf2557991b9160372b3338d2145c7b" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="fe121c9c146672af8452eb934803bbeabcec25985ffc7544b4745875eab6922c" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="f31288a471af36e0f84e26f33314973fb4fcc43a1ca3478aee8ef1d151fb955f" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="8b13b103cf6784a02e8c2ae923f0ef17c9182fb2b251997a14e83632a1a2cb6d" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="656b8b810d0a5a48be8cfced148d7d304682a0981211fbf52b4098a35795a230" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="4062c5978808008233cdd111c75b4da07f63f9c09d38a6addb27dcbe21d807b4" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="91b564daa8c6d1632b9d55658d33b9ccd2f9f8ef79d54633d7a55af5870f62be" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="9db862417fa5e14374a9bf6e2e9be7858bb7d0000969334ddac1365ad60f5953" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="57569121db664c626ec3d5cfaac15df73503dd067b6a3d12d5a1a707b28454ce" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="8b73d48ee9c00446c42dc9ab5a304f71cfaafb2daa4f988f1c6ce2d88a8a0949" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="a50e6f06c0533f920e3fbf032eab95052a8a694da1b4f536a13e09c1c838457b" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="edab1c502aeb857f7f6d5b005837cfb8b3b34e128d87ae0db0035da41468fc94" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="09201fcccaaccf3b3232b448417910098e19323a90b6ae54725ea1eaf996eede" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="8449a0fbebb90c1466a60c89cf5b96200b282baa8b11dd8a4c3d5d31fb99292c" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="b62fddbbf035a8370eb564c63c6a61d72975eb7c51ec3846f761ae19d6327b75" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a8066beab554d9f70c4c0667d8617d3fd4050cf9a38350be20b9be06dc97f973" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="b81dfed922401ce761f5c3be515ec6ec6714ed471686d99b1fb54cac85a53e33" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="598173c529492a3cc2d6704aff8972dda8f11c833b4e4c39276c2c3ed6a7b9ae" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="71cdae5c99190533d950f5862ce7eba1b6f3ba2c9c738213ea1719a8e0d0dd99" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="bcf9f70c1f77023c91f0eaf6ed4e2344fea4843640f75520cb8e69405a3829af" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="891e450f70fae1c17df77408be198438baa1e27fb7dcdb7d7d8f0323cc093e4a" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="501b339621afe2d09190ede85807a8bc34c67958973816663c2de1f4d6d11b33" name="kernel-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="260fbfe9d43f3aa10fed7b90efb1a977045975f8fcf6b2587deda679f318edff" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="46343c6b5581fc27f1e4dfddde5a0cabae5355857b78abdf807e3c777ee15e9a" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="3f8d4ad3c9c6728810bc58904f8c13fc02cfc3a15d092ecae2154492e42a5719" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="fc18ff7fd5999924a21600891fad8d622f2615950b462b0819d8bbe20367377f" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="ffcb69ab50d69f108cd243ed1beb7d0019120823c79cdcfd2fec0547b9744728" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="462f4f2500d7706b35f2b5ff543db7ea6b078a8973f448f995673f6f2c541de8" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="f65b32035cb42d0a84173d108aa207398b1332bebedafcd747ad064f4c2bd158" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="25b30abffa4d8ff943375a9b0646aa70565030f7a6d6324e4087bf92c4acf566" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="414ca566b209455373ed378e68e4ff3abbb82da69d6fadc815563d5a1a56975c" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="763f9fda03cc39b0facc234d013cf2b8bab7227003dd1c69691b857e6e24145b" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="70c1378cd1a0ad5eb7fdf7fe55bcda4cc17d522b3fa108ec3f0ef5e07cd93c64" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="e95aeb0c3bd5a76b73e179303608cbff77ca72b328148626c2112da89f2e577b" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="0d4fde76125263a2575d48913cfa646ac1d389c9b6ded832c2b409809099b352" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="38f98c41e6f7185bac8358d68572a3af38daf80595c1c69fe10437fa940fdb69" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="df16167f0146d0a06474858a7bf4855799b1eb88fdae069a6e5baaa8646034d4" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="6a62afa80709f4f1f45e734b957233795f5f9f75e02d86ea3d9301da844119b4" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="65675d980f3dde8506315fceba19f648f45eb46c45f85bb70cfe53ad099d6494" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="3b0b416ca68dac3c767b223e055917819a2146f75f1db8cdcba89a342f56ef38" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="48c6ab9f50719d2e45362d9e53046ed3e107b3990537c7cba76415525ecd94b0" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="b30e3825700e0d05d7b153a619ebb0fb5c64da63027f4cd053078c524efadc60" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="17e18072f76feefe66ab617d979f26e9d50c04d981f7e5b730a137a36889ccd3" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="49c3b97201c70fafb5449bf7f35daa04b1bcc11a43b97bf3368954785ee13b43" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="20be5c5c2f7a1b29c20dbcc549d76232834813ad3baa61da253cc52f0e59c54b" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="0ae87e20700d08d168413c8a242a60b4e1239dd8fc6cead1cb2fccaf0264ec69" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="ac5c7f6e63503743c368748641b28568ef03b43761e1ca46d156f6adf7d3d4ec" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="bced3f9567183e0cad7b3d4b96219a67592fbe20f3c6fa1978322559d27d5fe7" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="ddb66e8c303d3fd3c0d754946e0b527be9dfae024ddefcc2ad1b76dc37ff09ef" name="kernel-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="f32571d676bbbea6d96a8b746140e3ea61ca013d30cca9dfa71990543f4a85d7" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="c7c1e08c43db920512e07755b65e9dfa9d27f65c0802b5a41688afc9f73a3afe" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="ad35d4ff6948356176b1e9d81cab6882992cdb7f8dbd4ea7d51f2bf842895abd" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="cc34d7ab92b606e80859140efdfe5eede28fb8f8fc5318ea1d0b6d018f21f2b5" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="02cb46100263cf1187b55c40b1053c4d3f142c079c5f5e5f62143afb96c110f6" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="3543f56f697677a157fc358069eee2414804030348043e5b63299e7a38a53aa1" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="dc6500e69b7ce328ae40ee9c965803e781023dc3c2591539f58e78b4dcb4f304" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="c2e8e87f6ff26b476948b658af545ed7d094e584cc68a8dd23426d4d2c8da2b7" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="4a1657190e6bc176cc0ab3348510a16b5f5599e29309854c63233938eb123911" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="6e140bbb7f4a49fad203e1a933c89c767f4eb48dc9b37f03dc7232ce2dbfff19" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="fd3745449fcc76b80fb17c3c907e7bd9786e8d0e747b63246bd1fa5bdcda9006" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="a6d2782eb22bbdfbf60fec2b8dd4f9b6ee0cc47b5aefe53aff102ebfe0b2c23b" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="80430e3f5e4059402971ffa26e54e427dba98901e04bd61120bd7c6e2f7b8cb2" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="14730fe58cbce600cf8e48ea4e217242dd898566d9c5b09c8b68475b3d01a401" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="3139632c111a2a5abf5315de4247dbbe1f204439dcbb81f610722a4e81856363" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="1653c8664c1fffc6858f167d38ce5b6dc76a9a637d5ce8c55b874293fc3346b1" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="c752f4bee7bf1d5c6f7c6a71b9cbf2c77e4f949f6799ea8e2f6f219995e0d101" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="d0450d48cb8653194e86240dddbe0eab40496f60253e58ac2592cb7d4638b933" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="693980d1ffbc576f188c61e66f86c5e08daac5005fc0a7e003915faa90dabf01" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="fe391041a32ccf296e763ca2e95d056df2504d77de8be5acf9f86cdf2e27deac" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="b3cae4b9d5357b11e698dcf760783f02cee2432e087f17bcd748e94dec24cd0a" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="a466ec7c737181bd403e7af116714d7834423031a4bdcb45d3a0e0c596a9fc60" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="7f96f4fd854ffbccb20a16e809b1af38a38c291c359ce0b3bac5818c505c25b4" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="bb5200fa54eb2a4eb6d251ad9850f3589d99a734446b0ac4a1093e2d09544815" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="b256714fd0939cea6303fa26b13e1a9da7be8f5b1582e2d1a7a73c489e7de204" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="2f828dd8524cd49676f032213d359052b1335a0251d1dde868971af5b236a762" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="4a3212757900096f054d643727c1fd1b1b34ba10c318aa92287d0851b245b0b0" name="kernel-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="c40f4cbf2b9ab2fd4aa25aff586e1b1124fdf46fdba5b7871b19644e015062ac" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="2eae77f4a6956f22027d95d643b0d594a85650ddf5ccd3271d8fe75e47e9e75e" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="046b3e44f9cbe0668205357d8b845b263ac6645800a5998c975d2280db973843" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="2da4ea96b531c3a8517b2b49149422523be76d969628cfb0e45b43df4d31d61c" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="bc612671f6852bc3aadebcaded2fc94bc0148aeb2d7c9bb2fe2b12bb40c4baf7" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="168a8a353eb64c1a6a3f727f81a8de02b0e8929556ab7cf348477b91ead6385b" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="52f07a5e9c213ac56ccbf61d89d0e31537e425c2765411ac53eebee3fe6be87f" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="00d86a3ad8449d371cbf7c6cbe2bc5bd61cc990bff0578b1200a32d6ee708f0f" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="c437f8402192de62a908a6cb4ae5df9cc3b8161c8342d2b57cb4a9bfa769cfa1" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="053abd78c4104c559d228b7d6aa3bd37023f955dd25eb622802439ceea150a72" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="6d69e75e1e1d9652cbf977c0b208b8fc4e604ae976a95c8755edb9b42215885b" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="0845088ff836ecd2238988fed83bd70d243778c3653a0d1d52f1b19a4d48a163" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="a7af5e5fb5f0fb260de62a9702d2081215b3be5dece9a9936079f818f0682520" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="5c0511fff0c83315af682396a72dbaaa302b7fab47cc4243094efe92133cd7ba" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="81df66a0b312de44b3f2fcc9ab4cfc0d8b97b42a5a403d82661456ba9927a6f8" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="93b2951e0574e20f93f3c51e8ec0c172115bf64b3ee0237c01768f4febae3698" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="7c15d1a30eef165c7de2423f70e83642dccec07625cfde5e9d49016a29793092" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="bd5ebccb85764d0a3c55a9f142d5606788ca3860f3e0d438d86a434185d6937a" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="99405a4c728c7b58a482935661ada3c6961ff3d31b9f839c0405dca4bf42ab32" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="07efbbb938d44002ebdea38a18a25ba04011ececc676a4ea50d8bf4b6d12055c" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="b7084261fb0c9e24073239f4817e699031a47e3fb0d9e2b3c503c79efac03d19" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="5610f18a977d3deb43db705b93a20f09ad5533ab54aa9356399252e0c3a309fb" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="3d9a99d28a81d8e1e46c5c267cfaf955836abc4559d017c3fda4bf43800fa9c7" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="645cfbe99e8f60431c429eff76e1d4d89de71c0e2855b7269cb8996e8757453e" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="1e1fae6b6be4af4ce6a153baaae96d88084890097e8b228c5bdce4a89ee8eea2" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="275ed7a1ce823507eb03fd0e10a5a832f6d6a0a710e2b1b819a47b153324d209" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="9792912fac1041f60f0696a3d20b1efe06d6a48ed4a748685f1f2a8255d2ff8a" name="kernel-debug-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="59da6b120282202d8d4ac3c414c3c31994a02a2bc2262375cdd8f34f5308f4ee" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="db6a7f824e84fac590b09e568a4ef1f7af3b48ffa92a5fdecb8b2e53de3fe903" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="4cadb73552423a8ff7d6de326dafd5bf5fde0cb02a01eb9f815520a154e6cf76" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="5500f14d85faf9c79a22be66ac732875323f9f0e27c2654e29a5f74ccdea42fe" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="b5132a563efc6b2aea3fed8ec140351dc203d6269e4c53d6d954a02fa9c2b004" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="70e6fdbb26c1f0d4d0ab7833839b19bc8bf1e830bc1f8721cfe7d448f5be1c24" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="220c863a79920002005ade0a1cdd57b8ac6a4e4c6f2bed03511d926ffc044ca9" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="f775f2c2ed646485b053becfde59f0abcc2d9ff5cf848879dc9a456bb698a1bf" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="da61bcca3cf12012d2e3bc12ed04c1bc10c3fbdb05a0533a1ebbcc10afcdb388" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="c22bec86118c926d06fe23c57e0c4bfbf4e7ac6fbd1f5ed5431ff02c7eee38c4" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="968a3fb94e3a91574f8b8c1ffdc5abdcc44189b7de7e03f56cb6a481ab2bb07c" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="559f6b195e2a0e8b862465561bfbd1f19fa73840f508654a7af69c882abf252b" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="22938267afd6e312dcf51b196437b1205dde71e5c20ca5a9c5689e037fe28e51" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="6e15d1d82af4a3ee106b6a30076347d384b4dbf97fbbfa0efa77acc64cae6b67" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="de6121fa88f32f11b2dba43bfa9c89e012611d45238f215ed3dcfa8ebde68eb3" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="fdf0f2b0f5259ab35c6501b92a948d62d0fabd9cd8baa6da1087b8daa05ece2c" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="20eba6ea1293157c09b5c1d2ac1070d942a5931b1d9aedb5c1c06d1032786c77" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="b543d98302a1a4f03c6b707884f985b587a394f2b35901ce8afc7b21aeb98d9d" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="91e3dcfb72a884dc95bb04920ff6ce5808638b283d449dac969391dfc0e53d3e" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="1bea49954161f6fd53900249b3a0ec5e7b54796d28cb4cb71842388ed5c608b2" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="350d262732181975a809b1a031a3137aa6d34b51f06416a14440bc26fbf61aae" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="6b5c767ae4964c595d8dc65435f6ee5b2272526ffdd419a8ab1c068579b235c8" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="880dbb056f2acc2692c69f1de910b29b666b74fe96938b1e8508b5cdac15fe15" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="952e05a0fb4d2c3b23469123632add05b378a883f6f7214568a027797933e383" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="53ee4af7f61564d382fd695e6c94c8623b1f1931fa4521f71cb969cdf6946964" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="8a174e968767d3be4745986cbda72a7ba23879f163860f42c7f1ae41c4e968a5" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="32676625c7f3954d5018fb38f881f15bbec1ea6c22f8b61720f8467dd54e8aef" name="kernel-debug-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="ea1bf3f6c4eaa20fce38683b82b628cb7d6b105c4d9c8b9877741c5b85191550" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="8d89bc5159e5dce9193010b6031979bedc2e46d9468bce6335e7c2937e320155" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="801c74ce1de20f35aeadf9d28d1724eca3537c02bfcf65f1591f935e438b038a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="51931cbe966553e4d0a9d0f2480847eeac75090994e98e6ec3f19642cc16f300" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="4a57887fd480ac5cc8e934f75c57c0aea6301ed4cdbc78ddd0eb70a3aa5c0323" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="d93e7265e2d7d3c20433c47331239bd5215bd06567bbefcf1813118058209c00" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="21b888dd6742f3f5c29ccf86825f83adebc1d136c34e828e313fb40497926eca" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="814eab625d5484584ac368dba561ff9bd50e38df293b04dbf761cef4af50f2f3" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="d045abbae8113dc2b23df1876572c8ded12f2340bcc52478108725b7181a271a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="5f52d7ac4f36b02cc3d9024c5625f0bd6c9917ddec8ad8725e78e6821019d287" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="a6c60d4092ccf801e88c065fc73c996d86c87bac1d7e6072cd2c2af19e1cfd99" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="c2fe4225fc8ab3aff7898eec0f490f826989d53d7bb7cac6e1acc0c024947bd2" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="1c7f688c1597f25e7b9b5cb249fa3a300218feb4638785ed48f40bd875d69999" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="4965364476245c88c20f20e3976ed20568309ccaa05c012b47538f1d2202e071" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="aed0d9a60a5ed774779b315c8478d2791ee873f9ed05fc0081281c0e6f113412" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="02b1c60199237fdd4f372237fa780a3ba510560f7a9085fca86ffd74647acbbb" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="32faf32989f94c8774c76f89b14d92b58c51dbe61f27aaa226bcd3b937df1108" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="98437b275d0f44b2064a1399fe9a84798b59e3f60ab5c76684b82bd710a0b7f4" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="14d909a5db80db718571fe88d968cdb482bba621a73927478a92622566cc6dcd" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="bff781e91a94ec312b7ad6e33e86feeca2f32071e1bac28e5246417484186ebc" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="565b0a4be86fca88834193c71776cebfb648185ad7a7ec86c42e178df5842888" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="744cff3180acf3b614f033d337454915a1ac2b5a38c1e2a9dcc2f26ecdb8922f" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="d7f001602d8ac6542a855bc4e87014345b9dbbf5b47b96a8a1f6dc0c8ad97519" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="66aff3e07348d1d24ed9fa2ce738abfe8d176b8a110bfea17b6bc6d84a3d1b2a" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="44af590b28d2a9fb028fa923de0c61e7750e3b93056752efc5e3c601bd255b8e" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="26f27fa5303f6754e4f4d93f00e80ae7b2d40156f61e68027fa99f8d2632bb97" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="c09299d795f4cc5017a74bf1c66e840cbafd099793372266930259740bdb2231" name="kernel-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="79cb4548f767204bc4e6981faf821139910422b512f6210d5e5f776e6360b6e5" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="0153d12f34649c3d95e6f43ba9a8beac1a6b7fd602ad3fb4a19b0fca789ece8a" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="02f16f10c88b6b7d5d1d9777ee8862297c9c5ece5c1680b32483d4346535f6f0" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="c079e0e31d67c7f958d7dd931049b382452e76efee653e07d1d5022c939396c0" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="6c29d474570b8034093e1ac5b16bfd560807b98ae8f0eeb7c85a049b5f96ecc4" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="e813cc8600e4725eb35fc82eb155024c10a39172634299d25144a225f7bc59b6" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="936c25dea5bc4ca49d0892629da39f767a9a2f940a058cab1a022e45d7ed3d65" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="63210fdec9a496295dc9656ee56f6fefd504c01b6475e5c869e018e1feac5531" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="a19742234d2c7988436c60358066ec8b065afcc7ef18ca4e848a0ebe22e90090" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="6f48f652d2ef5f438eff5de9ccdbbc472a92947ea5d0183d86d451b1b1767942" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="6845e483c9e6d2650ac0a91251b62a3dc9d0d39b341c5f958d04d5adc928e626" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="8f9b815745fc689a835437d40d88cb8f3f525892949591ad34dac8e7fcd028b4" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="5ffd6509779cd381ab69a80f318a5bd4b35627e6a7c79f9413424b6b5a338f32" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="c3c570db9dba334c437a16e56790cf91f2ec871e01b258e6000652aee4720a3a" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="a15956ed1654d33b8e09db16f91f4c81579c5c1e5e9194adff14337f0ef1c2c3" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="0f24337399ef07dac6d2a0ac4c1091b0a3adade791f6e28a976731b8508864bc" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="689ee4f0d3ab3b6f6cb9ea780b08d3fe6aed6b9154b5791120a303571223fd25" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="96042ed3d2082f911b5e59cab114e87d145f25966e64d1c1ed5887c5dcb20519" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="9f48094cf0386668eabb4d1d4ae8b745b6864fa1ad535a52b668c00cf2827cb7" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="a80adcb02da0bb87cb2d6467025528d358ddc990d0f35babed2dbc7b1ee6c157" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="ca1fe837280bd2c2dfcba16b0496ed51619e95611ac82193d3edc753ed1ea6f1" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="be0891f1fdaf86f24f22bea647addba1118982832c3d0dd975e5b53633d6336d" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="0969dee050bd3239c9e106697dff71942c00e680ca05b1072faf8555e71852f6" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="c6a13983a17486fd4cb768b2458fdb526c4512831f956d9f2712d8c7bdffc28a" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="e1a4c5e089dfa22a05b87a9f0acd91e8d46c90b0e6cbe45f6716756d9f5e3d2b" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="52e1db027cd187691a1f8a5f05428a71cb531f26292612dd1fabc1fda314814c" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="009947b7d84ce591591af092bbd2ef5ac508f0b3d1b83ed5c92b69d11e8b1b22" name="kernel-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="98ddbff991b151d014dc8a576c4cef8d2f5ac909b136db915ddfeaeb98c943cc" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="d28409499e5714f124de64d82752a39b652371e08d1d889e8e4a99f3eeba43a5" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="af8debf85118a536a6eb746f18c53575c479581b9b632a41f0723c9caef9bdbf" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="21b0069547fc07b46fb6c71742cd2b3dadc58b30c74ad2f929928f0205795898" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="d85e205e5a0e1bd6e38674167c90f24da815667d40ab11c3d785c807b5a00039" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="62f5ab4db46ab5ceddc64bba7afe79331379ec3db3db58ba5ebe87d96a764ed9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="2aa758637c897ba7ae644e812bff84dac29d787197a0371b5104d7ff97ec8e83" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="2606754b3c466c76a5b2fbfb73ee25a1f3dfdac5ca3436f5304b4b066559ad69" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="50d527705d3e0f6b913d1e273b0892038293bba2d4be9b2a113b086d1a5d48cf" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="36671a8a70a5b00a5832a426145cc3abdf74f8e793f0c8a6bb7f17207e152fca" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="d006c466e36f93f34cad4fcce7e99ff59617fadca9d7ac6f7ac76ebc7f8b9056" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="d8ab16b034283d92183b093a91821d1e69a12aecca223d8cd11e0608fa8cc7d9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="39bf723529f065021ae576e5c822e2ccd44c2745327ce75669baab9c1afe0dc1" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="db316a4cf065d10fc75b991224909cbe03ac30b963a5b02da1f656e140ee96a3" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="0dc8f98f624224838e099ff0e4d01c0a42e4cf2693b74ba7f628df2e537d4097" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="7aa2bd415ebfe32d5f806c33ff349be7dd92a89dad7a2f6a243a82d686b0814f" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="671319a8ff64e4105bd5570857259e132841c5036b76a4fb61a799ba9a6f0a98" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="188e22bda6b50f85a9499f04dcafa65782aa170dae9c5619eb62b3a6ff67399d" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="a7401fd2bd2041be6c8d69866c6d73f2d39f0f4b982415a31f302d9fa7e529ec" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="470751426a1a9ea162fbcaee1c9c3a46fe90d657b1876f3318d6d1dd57ff0623" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="76dea812029a52473b8db2f030217b46d15671887157cbf415599f5baad37e20" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="e785277723ef52677535340a6159289e777282f04b84517e0ed1bec022002ed9" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="c6a47a7365cc6ec5beddce977262b189071434c25c054e80dd81ec3227fa541a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="166193c139d8ebaa7d8649d35cf0d5893036954064ee0328264164dc8650a01b" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="c58c85babd80590c9110456b39b611d34aaca495e02de334e0a126783021c349" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="67a7bdf1c4508741c75880ba52efbebd6104ea4d25383188a9c462fe82a3648a" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="6a7fa8889f6141257ccd300b79cf879a4d58078ceefb1d40a82d4a84436d8931" name="kernel-doc" arch="noarch">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="2871445d7a4954a86204a69f4e2bb5dbd9acab651bcd7f5ae3804db8898b1548" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="b6a2daf785de554bcf6d27568d3a22975d6d18a93a853a08976bde0fefe7d98d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="a4970ef11dd72b405416106c7a8ae526ebf65265a1c44b933df39fc3443883dc" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="6a5a21c44f4de1c6f48aabd1961e4400b20e2ed32e7207e93272bf6a497c9d67" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="e3d5081887cd734239b16a09e8fc398e6588c1e531170763991b5e296d3f2a86" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="42ab1703aff9f1878b404108fe4bf490563a687f9d209b11dadad7dcbd167604" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="b448829b98c39d8340773d62f8429e03368bf03cae7e6d7dbc7704b89c6bdb0d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="a0ff38fc0e649edc97baf121682f360baf957c8e93029edd589c3b0911c24010" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="89be69eaf3f140660330b9ac233023c700d0547adae234e5b15b76d97e8b4f77" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="2b2ea002c802321f4a556c750d543d36c6533f54f6dd0d99739312b2ca8e9873" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="14f797ae4835d9f4e8f25bfbc86ebc45804a76dbbf5a1a115bb4c1570413ffa2" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="adf8f6686d578425190d660a40749759b42fe34dbae2aaa7e9cfb886f17284c7" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="30ecabad2ff9894c21d61a74d51a3415c5b9220ab98dbc663f32cdc52dc5fe4c" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="2c62e24620da4a5c69acbb5cb2039603be2996d62f92ac76cf3d13e423918116" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="fef66c28b1ba5dd848a4db4de96d25d786aa8dbdd4ea5ff3ddfdb36ea363dd92" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="47f5f9ac7aad72794b4ca32aa9fec3b9112497f5967a6930874510184426e784" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="070ab2b12b576e4e9ba9bde0bf880b248c239fa6c39c2100c89502df7fb53688" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="8d77ec395988ccdc16bd079a7ef22ac2e99f497e2433cdde9ae4904ecfa5622b" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="778607bfa8240358e102a213514be32ba55827675a2097a8aa7070bf9a54984f" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="d1f8a1c8b3eedae5a9f1d95d02eb340536e3c3f1bbf64c6b73bce790af78bcd6" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="342166247e2b176393d40788d8d10347e04e442a4e5bead407e78c6eac2c4986" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="b0f5ce212ba2df09584e64d58903b812c25276844aad643ba782180e66b5889b" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="b6d1087a5cc399bb8fe2a7d9e0c892aa2ae6b194c696032df1ab1b53af75adde" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="d1e21f274e12d885f1b4d5dd25385b2335d616ebd71a0d5b7ec514dd96eec13d" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="eed18be1138c6f1d2319901156c41f2bed9de265667442bd2a890b0e7f7e840b" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="7fe768dc62c6905a21cc8a47a767df21dafe87982a1f69c6bcb7dcb2793c917a" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="aa715adfec1226fd023d1943f231e641b023dfcf07bdb937f0fe4dd120797f74" name="kernel-headers" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="01c4c4a24605b13093b572c9e82232484c57c63e1b28ffe7ceb7659ef29e3c07" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="7f723d1e0f49aa54f54b39f7818a07b204a3f715dc54360638aa1e0432d217c7" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="a1b8f08b29c3c1d80fe4c8954382abef7edf7ca70bdbf5f4f13b9fe372a2e932" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="41a5b9756f2dc0d1df1f97c4c103e4db507a0c087c38e370145f4ea30f835bf4" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="b731ccb9ff77aaceb141211d51e229042d8a9b150870dfc50f8aa311ba3f087b" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="ab5df0ee60913a47ad68224b6c4f2fa364e986fcd136412caba9cbcf2d478015" name="kernel-ipaclones-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="52731c7d80c364ab3802163c62e49ecf76e877e7ab59292b9b7d335f1d00724f" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="6114cdf7ef3417a0f4417d2724b06ac5aa9586ee4a9eae300e918b2b6e9e7a57" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="7f2e5f4ee7bb095b580e89c9d68ddcb913a2969ed7f2ebcf23005e7d004a4f17" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="2c9fe1f831c6d7afa6fdeb73458aa2204f9b29cfac6904e43f8e0b84ebabc60b" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="e8254e3cf349c620fde2aae3eebe69922877bfd63711ec2448a6de71ad449a76" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="e3a0fa1f6e7fc742be605627c52c83eee5ed276586b0d9b05b13aa887d3d5eb3" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="1cec9939ddb6bdeb9fcbf0d49cc03ffb09a08f7415223d5167030358441f6c6f" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="5982445803c51fb4f4398c8c2e64f737622932488680503537b94c56fb5f9f5b" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="b9ddb399a825e07543094af30bd0e24294c5acde2f20b2075932baf4172b8eaa" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="ec8bcf37d5bbdb36f7916ffb66ee96efc861df55313655d7d0bde12f20bbce40" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="487072b5561f9c2151b562ecb0359b3aa3d42b30e8c8772e66dfc4b186fbc48e" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="736712da1e9379fdd1bb5bf8e2fb0d6789b4387c043332bbd957991314a3465f" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="6ba1ce7c46747054df58e435d432996f8a246db4c5bb0aaf0578ac66f44fa94d" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="15e0256c1d1e61aed914f16806c39f55b0f86590aa0c0d613229d3535b407b08" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="bcd37df4ecddfffd6e339d7aa29d6dcd455340433b68561536b90403dacde911" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="dae8fbb557eb418fc0e134aaa1b8722e4c1f33d0b2e24cafc5fd16343a4f6af8" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="72b0630ab265831e4d9d7984377d6ef204545489ac67383b1df4fb4f11f66c65" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="29ddd9ed5b9510a15cefca257a88295954deec1ab72a7a6fab58e59b414c5364" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="1e3205092930e37ccac56cc8dbe267d3612b395ca07818f3e8ed488bcb4a6fd1" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="575c04627e8948212ef0a69092f9144837d354da2b2d90e182f6355930e1ca3b" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="5dbd530b6d51b6674a2444f8589d04a9e6527a5510372aae739e853b2289bee7" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="9410453d84926df1e91fdfcb394292b496d0649ddee4b76e50e0868a1f75d6a5" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="ceabafd6316dde028f0b0401b04ce20fd2c829e1ddae058885841fa3a59c28c1" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="996dc999dcc0ef07382fc4d7c7352504528aee02e7d8e5a40687db526a1cc87c" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="a499c513aec16deaeb03c7f68338cd0d6957ae59bc36769553b2f605d401a17b" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="f66dd5cedf0d1df850e330a617b0358b4111646b2956b5c6ecc3c4a68a8123be" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="5646827803c6d8831b1eceeafcd4278370f0a7bc2904f31f7f02527a333ca911" name="kernel-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="dd9c36ed8f55a0210d897333f03977f02c67c31298155345c319248681984095" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="c1b94958540c1df480c3820a3057697f6f36ab4ca824915d8c64ccc3f3d4d7a0" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="2ac80a2909398d3d611447cb63b26a0e3959553c1b300b0a36e1cb05f4249280" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="cbe2c94a6c2710986fa79eea3f2f73e8e34b4a21fa6194f8030255b08c7dbfc2" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="800568682120696a1deade9ae5504c6317451f3944d5457b5da1769ee6436e95" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="3a67ee6955c24b79acedc7a8ef7bec9f80c26736f4a64533847d3dbf9dbda128" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="b096c6b125b22c88a9c5300ada6e2e62618868fe88ddae871f9dc15bdbff2579" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="1882f2cc01085242c60d7d5a2225e4b78b5c736b0e03751ac913c5fcfcdd82d5" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="d5f96c79d360111669859f5823b52f1c45b5152f9a123e736050c7387ced215d" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="f65c385838723fdaa877595c2396aa445fe8e4eb13a1a3a38b561c99c439a111" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="ddbc3d8cfc840d8e1cd3d773a040a1dd03105aa1556a4a5d16732a5fa14ad5d0" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="0d32fb4d434cc510fcf74b64a12dab5b55589f3766849733310c732ad6298a62" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="6accd6849c938e57b728065974b6fd2470b7364809ecebc90b7bc0b22dede1d8" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="969222b7013032424bdd54cc18b915ba577c777d868a557af566f788c874e813" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="a21d8e2d24da6752d4a34c226036890fa40602b7f93594ce58cb671c425f5ef2" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="e5c64434c9826a1f3e2650c6aeb1d511ebbcb4bdc3293f261e412b1c05b54299" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="540b37a6653df175ee3af87eb9b9fd6b542526c4e10ac25bc4d9f20aef6e61cb" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="4f4213a2c77a1b775425e9f90a6347175af415b99b4b93b69fb51853e5035a8d" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="88a3416b39d8b4e8f2472e3680e251ac9bfa625ecaceb849ef45217d4b01580e" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="0683654cd6b8e2f9ab2496d6f48edbce7ff958aa970e5712f4242703b16db538" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="18f398512aa16c642c08f5860a24e7aaa4b0355b10117ccdd55630ffe2f39594" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="d60bb283b887fca0f3296f33cb59644ce5203ab4f9147cf94930bbf8e8fc743b" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="11eefc8d6f1db8c34a773bd2c197b71776836353e72a4463e5e3e1abab38eae0" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="650e46451c63fb279aaf8bbd13f4e5c6ed0ab6059c6a9faac460cf82511f4818" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="9494bf5a2e706de7b30acb13f90cee9b56f52e4341f4aa63d8739e5ff41e50e4" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="42a5a46b8f7b84884612e6cbdd710e09be809bcb7eca2478b4f28b70af2b5c63" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="f9f2417d001b1b3c7d4b7eb8e68bf587915b48d6784ba8e0baeec087f0331034" name="kernel-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="591866b06e8490d58dfeb85a39e47f642b563381064676420b3cc75bc8a45fb7" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="77dca818c9c4d6430c389c8389b3726ebe21f10c43734f4b0c6f34dae9ccc0c2" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="8f15b51795ad7d54f982d1fea2d14926a3bea5069a0a80f9253af310c7817f83" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="11410d472104f771d21b0effb7c1db65c19886077c8d072e5662fa83de2ccdd5" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="942c6f4fea7ae4f2fb8387f303665facfe3f5d48caef1a2e73c16ce33843eb4a" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="1b1c62b2a8416504053eb26f4c74ce0657d791783660e90cf9f53b641d9190e6" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="22407bcc85553502eccd8525907fb5f3d2434de275c3505ccceaf13164209b9a" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="e2da94b1f228e64b540242737cb73519175ff7c5e2fb95e6d687ed78e8badc62" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="f3f79a2dcbc98544d77452c4465c154f7b09fa8c463a1110c0fe942a8339d093" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="7547f29f841ecee4f68fc87cfa4b82decc82380de05ed924927289a8afa666e9" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="a73831d4f3d3c990d57e84fb0a31a3513abab5c874a54fa30024d300a0e8166e" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="ad3a962d35759bcd918de61705c47b88b2d22b8f21976b16da189b88fee43573" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="f93ee9442c7bae0ece47dd0026ee4ab34bb4529f8d0158577bcc5db1ebd04c45" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="3d58493f4044f5ed88f754195266d3efef55d0cb23bc5be2016ea428bb763e10" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="929eb617c738c78957c1290f525629ec2a9a9b9cdfd824aadee9750b617fbb6d" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="00bc857cd28dec899921f8d76c5fc78202eb2f7a1984bf6a4420b181973a4673" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="fa5f849a6ad80726be21c89969ce0e15da22a75d3c87508b23fff582aa7f091b" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="6207f9694ea2807fdc5eaf7769b0463f586960a8638325740dd17cbbd48dc1fd" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="d7d993e708d2c8052522276982c680a4784ee52da5a5e966096becaa514eb90c" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="2f6315b2f3ffd9b83b36ac673338e0f40fd6257e16726af20310418be1e26d0f" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="8f20261ce7c5e22cc91593b0940cec4cd97858df0f6850f2ffd505bc26f29847" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="94f6e8669bd85098bdb24e404ebbab1947b5afe49c7c3853bdad2c697579ca63" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="681ab180e234ad486a41ffd178b6b43ee3db95fe146931b2b578a54dfccd5bca" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="622bd49fd11a32ad4f680b40bf8e8bb02df3b0a4883b450602d9d10dc4e580bd" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="d8291bfa0b159dd877594f30e828a4e0abf04f8db7485eae45b19cc09789e668" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="2c3ed2079eab82ef49688649f789d9959824b5761c78e2fb6926accf0a9fa23f" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="5ed7d051843baf860c81a75517d1ee479e1b94092e39bfe8fc907ec9fbcbc8d3" name="kernel-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="f4f370def299567c4a2df8e45c169ba7e1c35cf52bfce3f1be007aefc0536378" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="5ff1282c904f17436b31c5b63f7bb2ce3fd1a197edbe36ed3aa5a62ea6aa5c3b" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="b0ad1a22e321319b645c7f115c99d1ec546b71db7a22fceb54b65e0d08228b22" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="ad85078c6224716c6ba36e605eb4555c34c9ce886113d9b974106d2d4e77e945" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="51de23e39160709c8dca177d28f1da6ba3d90dc84cd4db06d381104aa68eaf73" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="11b108cae0687008144b3b78bb6a8e5b9c6f149ee6142cbd4a0b0cd7caa71e8c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="e26fe1c2260884569218e509340a83ac4b3c83a5157f7c113c882ac1f677e08e" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="17a80b99da0cf52297c58e6fc8759b1f5d53a40ab4c62cc72a4bec93aaf8211f" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="65da5bc63f47b175af8895790624778fdbe7d5b3d2c998c15ce61603e276f3e8" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="ca76f7aaf85b118e3a44c012ba1d1f794fd17bd3f99dd8e8f46cd343b8b54e6c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="0f06d8d4704267d90bc96bfb73060ab3ac2a96f8fb1d3cb0ee7fdd8db17e3a2e" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="eef0a4e2bdc8ef5512541af57db71425e3dffb2b8662666208af879dc709250d" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="858c6ccb8d39852b5c7c029fa15137ba759a8a22cb93a9b256c9c0906e69016c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="95f6a498f859980282faf59c2823946f66f8f23b905954ceb4ba8bd39bb85a3d" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="141f7f982887d8818d8d9cf65e9dc386b80d5948e217651f93be689b4b238555" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="e1cd28ae2724f42e0ac45630eeea60b54fdce8e72cc178d26845eccecd18cb46" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="306de64a5086bcfe1091ca0c5656e5b7fb380dbe8a6bdd80fad0ca27a8dc85e0" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="19407d5b194bb1e886abaff2fb6a6e438c259aa22aa5974615b18ac94da27e9c" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="d833d9529d4cfa67111a1604472b74d1ddada64e499f192b0f3da0a0cea092bd" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="7b3f6a21893df4fc49251f9870b896a461ef60fac011882cbc06f3964453dfae" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="cfea8dc33df3cf3377a1e460056c8eb4e59fafe4524fdcc360032638e75c6b68" name="kernel-modules-extra-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="09d7810058b7371f01f7f1295d4a0b6f6e4812fc60fac05e845183266313b3a0" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="081144eca229741841aab127d833065a468a50efa48bfd11995147b028c60b9d" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="6d62e616b04c0ba749b28e511c74388d323aa7954eaeb57f0c437bfb612a0277" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="ee21f7163bb760e45342b24701ff43e3a543d598e9b3f88d41b57cd2ccfcf8fd" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="ae9d9f0df99de769e36d76bff5ca11172c812df0c023a193e545a676ca19e459" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="2f527eb24c275bb731c09a4b1dcc850fd160df2a080a592418e688bc3e5bbc2a" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="5d8acdf70f4eb82f017e6c6510e5cd5f493086873d8902fae75449b5258103aa" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="e3811b2f9a04ac67721c250b45d972b1d3455a6e24e80c29fff0087ed3138bb2" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="5760710985ed289f91ca5861620fb6e449a969e4ed9856e57108b37b665510a6" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="9413bd004437926c47119757171da48d4db4d3716401085bd1d0f5aafc19fda3" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="167006775835e8be10b94c95a5df12ced1aa3f01ef60ebd87d5dffadb90c8724" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="f67d5228cdcd7012404e084c9a880441413ed3fb5399209782c3688ec64a90f6" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="ef0fcd03e0b959d82ec5300fc3d465faecc1c8d89adb4152ad63a84e5f737e74" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="e0efad5da61fd534cf43df9e183fdcd1a95b34e448b84a2e97431b4eeb4f8395" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="5b9dc8320b7c876250e602f8254f37c47a4df3fb16cc78d4caff1321d5e2902d" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="448240e142fe0e5891148a8f7e3745c11dfe0670b78f3cccff89be9b7509d56e" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="72491f5089d7c32c56e9171cbecdfefd325f6d31361b30faae54a926e109da2e" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="b0f29e576888e6bc7e0eaf808204fc7e2f85d418967c3cc873d97e098148aded" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="88825b5a2feb64ff4d9186d2a51a7b7e26f1ca9752053267681589223db25b00" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="577fd233906de986a4a487e49e9cf191bf9bfd9518fd08d2fe6469cb838d316e" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a6ca409e958790e21d41271ec69a97acb63d833100ac21cd2001f513e659c431" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="ec3aca4696d1d307357e0e66531bfec1868127daec7e6500ecfd7d5c1f93c9c1" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="0a1f8c5e05c6c207777f0487ae3d0c4efc42f72984246ed51149126cf15b497f" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="ceaa10b23bee86448df76e85680b53fd52176bf8e3905e4eb2299910f79e11c6" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="3176b2af521471d6bc7314a98d7fcad223a81e57399c98dd64c8e93924157126" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="c07219e941fb549bdde879ea36a8df3ff447f1bf48132f526299e9ee2fd33a8c" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="fdafd28854a659e0564a7594fe444fc2048d8e70aa26d832b3342149bd5ccef5" name="kernel-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="1ea2e046939db733a873017abcab48e33fa595c376906021544d281398a2202c" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="2ca19a2571c76806bde720e4341b06aea105b5a23f548d4ce0017a690169ef8e" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="68c46aca066f8cb24da693dc56beaea3b3c2f68b99812d0163a8ffbf1282e7ba" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="c1576b5c4172a9cf50b21f4491a3345e4344fa7d146750334306c1d6d0105af2" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="6d81b5c83123f79d2d30defd1342fcada6bed5a57a2eea030b1b8f957d5ae1a9" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="21bdacc326bb430fd3a40c96534c08dea69d49f35f1740d6ad433132433699b4" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="9ed17b6d5f26cecf0386a56ddc9ac3953d326226e40dc8e9791d12e21c440063" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="592a25fde8c282edf1860c12e946d5de8537baec8b3e88d32a9cfe1b4b52ac51" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="38a11c2e80d36896ef2f27a053fad57068f828654b112e965601d034d04e5b77" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="0480cd665bcd6a03de5450d80d6a8d022ed62d1756a80c7b3225d317c9804a1b" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="7e92044a181d77dbeafb9d880e332de98fb58383905c18dc46fc3a0e7dbae0e2" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="16adbfd05b40e5ddedd2b76c524b15ecacb6b807f31419dbc689a789bf048c99" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="d7d7f687d5d945709331d9a77745883b0cc26adb8149b866c0a4d77320c1e070" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="9c5fccd7c692b500373838e1ef4b1a996c3508cf1481a0dacf1aa25a5e955c6a" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="628ac9f68639d76ef042824e245d25bd686708c4cf21ab870252e34af287ef3f" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="312f13a85f89033fc28d0af4b06a696cb684043abaa404dc32a5453d23e3403a" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="85e47abc1d70d03a28ef06432b77034312da69bee39d5ad14732b03eac69f2a6" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="cc08aab1730112fddb89305a651750767ceb6d1dee389d2fc3d84fda48b0f251" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="69539cdccf164e4d06ae2ac947beaf6b8292fa0fe30ee01241773f1f3ce7727d" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="38ce9f8869cf0eeaa7e95389e3648c078ddfd6e160a32b84b80ae76c3599961a" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="51823d6fa59b9c26ea265a47cdcbbb0063e5a874adff7a4c3474581a471e0ccf" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="3e07b790c897faddc2b12dc084a1aaeaa3a3c49d626b791bb895f8adc07e8816" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="f9ad0f1e795d98d6a59f1e439aec8a6138de8885d14950798ff5b0e527946233" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="7c113d78625500d57705af899c6ac91f5f404767a877dc83b54bfc42b6a7d240" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="561bd2250a62db390410f83bca8904eb078602c61edc5ab20b0dd1a256d7fd6c" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="9e3d1d6206519559a044486fa28b3219e576e26441b7d67260d6d44300820508" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="4cd6c454a862754e6998372649e8a2cc5660bbbb74cf88b0ba3371d449f31a41" name="kernel-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="00d394bbb1f8f63b665e5d10ee3b3c288c151f307f0a91b8e646647d557e5bea" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="1b6b62a8aa2dce44896c10743317407564f451ff3ef074580f0c77b25d3c79e3" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="b37221e3225d5e541bde06c2609f15411fb06d48b4f15156733ecf9b413925f4" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="49885692ec7063f925d4460acf2a65831779914d60a2aed67cceee9163d416cf" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="6b34917588a790e8da52843a4dcd5068ffd3f5876c70e019670f1f0dcd75a76f" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="eece18c9862f17bac60378f28a8ddfbec34399a8a64b1b74d2d63d6af7fd34b4" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="97c2e05f60ecf97c029e3045e8ef51788a9cfe2ca3384f51dc9a22b3cdcd3a1b" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="75a55443bad9514f8c5e0ca2006885b30d7888ed5484b736faff787580a7d445" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="3c5acbe925171faf9bfb3c58c2cf26272eb93c2756366c8046ad303d27638814" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="e260acb1b2e7ae357cfe645f727b0997ffee7154deed708be54c752014688499" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="ad6eb879019afa6781d30a1407902dedc82b4200cd536cf45aae8b50d7e6f0df" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="44d7ea7c2fc35011fa1e5739f47dd8ce6a76089603753016b1a10d3019d6aff4" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="47d68463e6a9c297f8fb33f9d5f1172697783c2558a744c77a233759732ef3a3" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="6c83a4d5ba2290d1994275b2ea56e456ea133b957d1f75a3bcc18c92e1920105" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="432e4df6bbcfd7f478c720d8e56b405b69735654061ace864ce89eb37f6787fd" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="84cf00780130121cc1152a9934e5e567d1d8d5604f833505bb35bc444a3dfde3" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="851cde972c18fd7df62ab7411c6e71606241cedbc70e31aed21a26214a2baae2" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="22640508719338a75f8ea191ef886b49149ca1eacf036cbb0537ce0f38e04aab" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="6ce732368c2bbced304fafb91157cce7d4bcd0cfae53e9fe3edf65b562f0e8a5" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="5f6a0d7b648c6ca53f5f746f4da158d2dca002e1e5ca40c5bcebb4bc5727f7e7" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="e0d5a36521dd7493820db74953847a5e4e43f8169f2183528b7258a21386505f" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="ed782ecdc5828eaffcf103164c1b45f5bb084a8b91cb0e075eb6e4f039bcf063" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="6caef8b9d125c3f43fb6ceb65782d3429d7d0ce535793b2e4f66dee21ee96bd0" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="146a23e7d81cedcf860f1af363523ace683d9d8b9e3470507fd80ba11fb64d7c" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="1739803ef7a67fc4c823ed9901953568819aec35b68f7f0ae45f13d0e13b1d6e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="2032e3ad7ca5b02e087c6565174254a4b62169b04d2a6baf7712c70d6b8cf55e" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="d03eb4976268b64ab885198ceb2296a5b4b52ef83efeba37ca00a4fb293aa2c9" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="0775b2d859e4615bf11004cc4ec355aa246044c79acdff79638f86cff82cbc0f" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="6380962127c2ef63f901d359b20df19f50a4ad03ce2bf7da292bdeb29dd90d8b" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="30ba0a14cc70671c54d8b56bf97ebd008546329ed01f6f224a744a4ee4a98ad1" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="c89aecd8a27be28a5328b74cc677a8e40a37493e8f87d3c3c4a6066801aadaa8" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="0920c5a51cd14d0516a983253a734b1959813d95f6cf214a79150acc0ce5c926" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="ef2169ca836425db0e75cf09273749526a34f44b4d4a714159463a88fd8e4ab5" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="a4e212337cf342977d503456956cd0960889b7e524e5bc778945a61619bb951d" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="2c85e74c5924728c2f571998596dfc2db91aae38f1d8581e8fceac3e8f390170" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="4cdc855a09e8ea60f93ee6a154586ba71fc345aa04a6591381e7d13b0131aad9" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="fbfbc55fe87b33dae7f0095be9b35ffe10efe72388485848e301597ebbaf4983" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="9496c2179fc73369c35feaaa6690973a52977b54f423a2d90d8a47bebf39f3f4" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="c9ad32399be3c06342daac89a4056d28a725b37bc0e2617bfb9d2ba14319cd59" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="6aeb72b15ad992fc3674ef0f8e98702939e2b69ac64e5ad1192ec956a21dd001" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="1b9c1e1d3591adcf3bd2ab9f8684a2b325b64c4bc4aabb1a09526108c484a225" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="5276ce1e1ea1a98e9bc87eed509a9a1d4bd6f5b624f46f7f2ca0fc9e8bb4fc39" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="6352beaff5e625dcc3c90e0df8c009c971867021ed8c2a06df843cf7a38be688" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="d061a469f8431a2b87bc57f3a0d3a9687d8150fad54d18c443a5b17ad2a7d8ae" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="a76d64b2bc3969f7e9da6432006aea02f8483d42381b02dab3760dd45fd529fc" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="0e7abd22c62342ab873e7dd6c14089350ee2ea2cb17df1aeb2594f42c23827b3" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="767af059dd8d862992451235f2453b7808acf27a7b4a778e51d36501b0284af8" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="9cb95d58950a7a443a941ee5440002b2079f6979d39b524ab4b6e98ba31d5c13" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="2ed99924944b8600e1f48d80642561b9013a119216a0d87f699e59a66f452efa" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="05a2f75bbf49d835757e96cf33b3ef59588ad480b77e7359fe8110391758588b" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="82b73ee2212035566e06d683adad21deac48f32cd4becc651318b7d39647ff45" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="7712f4c4de4df1dbc5940b6cf6672beacd289ee8ddccdbe987a0d6694e2fda2a" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="02df2efebcb004d19b9c41e9c153e7ac0b8de896949255bcbbd6d8f3e73e2b95" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="b02e95a7b9a9b4c5e05bbf8f42ec5891e7f4011b853ebf33f4d0753a98ca680e" name="kernel-rt-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="6d400a535dca8b48225d4910d6c89cd270281184a2fc001d49580b790b840383" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="26a931d30ecbf5bd0675baa3bbc8869362d75653496636b1f295a6c4e71f906d" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="362eaeaa5d60a5c68c16e37e7a41e51c612d77593c886b373d87d86686c9c218" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="84a6f4ae890e845581994ee266f11b90b90cba8a8d4cb77fdddaac2d57d2c25f" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="0253ff4b3f58e8eb9b3c2a9e3d3bfbdca10a399b6b6a95d907ee97c06e120cb1" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="42364080cb1dd93db38b3ca890043e7f8f30dfee4e2cf0f89b24a02511cdde86" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="331dd6b3acf42608ccb55bc10eb3b99d638310b673de08bb9446bb1149dc482c" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="f133790c3267e0e2278dea3b321a10a997b166dc95a3185ea2fb6e42b94ad31b" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="860016f130743cd3cebb6dc9370286c06cc69cd666d49b770880dc5117b680ef" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="7a727591e1e49a4fb4bb07bc4500a004fc3ef60960a22935f2abe7af525a99db" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="987b760289361dcee4a4f7968e1a1acfcb17352954fe1a6010584b173f1b74cd" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="e5abda936f3b732db786ebfcb21bc76a3b0d6798b93dcb49b6fa592f71e28c46" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="b3ac7a316b96f2bbdada82898764ac2835a4119be09a5398f6e5183eae9fd868" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="f1e28e37b64deff0587da7e34a13a0888787a5d6096baae012d30225b0b265f9" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="9d46b9df9ad4ab3a61176abaacd5719f7ebad4503b5c7edd46465ecbbebae78a" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="128da11e3cffeae91f965f933086142838e1d05606687bc9bb5261bef93de416" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="e5c6b4ed4f9a6f72e29973cd011ae9ae19829c0faa1a89370ce470ffb76a0676" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="0af7c0b4ce5b96ff7dc735d7f3d1dbce1df7189bf724cfb5d2933a6c6da26263" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="ad9f8521f9cb46f90ad655344e32b78267aab1b33b4f814e6c1d6810f4add701" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="76c770f4b018f3aac383aba0c639a532ab3185d154f532679ed4f2bbcd36bb58" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a288bf2b3e136fabf44b92361d5b83c9c09e17be131e8a69d66f9cbf9f8bd24e" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="df1af62ed8e342a00240e86d441237d311db9fb34b692570f1131a8b47e4ca6c" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="d9fc93f20185d2ac18ff1093f042c755d20282dd00d22ba773def49bc0c7645d" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="95fbc403b4d1db91b1b80f31285bc821263b0278c7ffc197b40e6ca53fbc88b6" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="c3fb229c97f1552337a0494818a39cdbd12e88f902e7251ba7d0938f5f78167f" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="ecf08f149cbb0a8307c8918cd1302cde089582347e140f0af0fdbb7414bacadc" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="5ef473fe5fc8ce4e4340d2e449cfdaaa49ab71674a36f9889090baf5f99b9f2a" name="kernel-rt-debug" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="06a13b4ae373a972949ec6abd0bb26c3b89b1c8c14e3dd751d3b019e53757d9a" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="6897a072bd2884235e744c27bf502033d53e3b9b2f64851f2df9ac3284875651" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="7ed4801bbd45181cfb159ce5532f101267e812b75b8a813fd54aefec61a6a633" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="ccbd176a72ae2ffadd6626614d6ceffa64ebf926bfc27fc52610ed6aaf4d41aa" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="bf02b919ffabf6aa7836164f2f8c30e6f3ade0ca024239790206bae0e0d27a8a" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="6adc59e056704199e455802f392b47247fc6380d7a2914cd23dce1762afc3ce5" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="b85986c8f1f47362c78052e761249176f0fd356a4c16864eec9611f93602809b" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="3d257878d816c455a586f3d50982c7bfa61a1b4458b757b4428e51e2c4ff6684" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="691ca3a7fbfea43a64a91ca1964db19f2233c187b99ad6a2e7ea87d04a58f117" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="2251be949f93ce2c81b27a8b8db82b31888c931a3f4ba175b6536ed45d7d66da" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="ac83a2e81c9d82c24e198be1ee7ae5095ccc8db4268c92c7853b40c211dd1ed3" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="71263c46424ba5fd9765cef266d1039ee94fa3804e2f39f030b14682df5160a2" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="e616853e7bb6ecc1c5612647be1dad45861962819a63423e202e7f5a770193a1" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="a70b796d62baf4cd3c7f6ee81e41bebebe0ec5e5c64fddea778df2118a907b70" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="6530dda14a5dc97b32ca5dc4d3614d0a57d623fd5dd9600509655bb39d91a846" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="b2af94e67122d76572e76e3eb572d86b2ed4452801245b0fadab08129bbb14b2" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="13b8e4f695e18d554eaa6ea7bbaa2b57da5fa8f5ab627b681f4894b1895405d0" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="58dcc8bdde5116979b374b882385f31cb9097492839cb3e7f32ede1e4e02f8e5" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="f0a0dcbb5a7f65bf4eceb44833ca667eb6bfd56ad78f4a857c1855b0f6e80d74" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="3288999c984c84ae671201b83eeb1e51b592ff62a31bbc1519fc73acae8ce715" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a65dfc4988a1065fd01f9350581c0a2c396a0bb9f9562e261e8f31c5d77fd036" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="16cce2d426b3609fc0d0df76b119f52b33a387f09381a0a774fdc0da243823ff" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="94e32cf18887557e152eddf692f37eae0b44e6f5e5d774509b7739d48f29c5a8" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="adbd5481482232d6ebf67d37dea0482e28319bdd6bdb808140908474a448d48c" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="54fb273dcaecb911fc446ac8c27eb8a6a6638f309d7b8b759928def2356f2b16" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="c243a7b080e4365f76ffdf76795bf9211df209982416eeba3ca0a92bfacbbbdb" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="0c5cd4127eb1df4b834a3be19e9506b95c1c5826a59680a6ea2c5fdd737b0226" name="kernel-rt-debug-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="546fb9b2a694816400285c9b430fd35b457af1e87a151f0cb4f94735864fdf29" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="cb340c4ef599b07cdcf02b0b52a69eebbb1f6c85155e504207c893501443be4b" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="9113c82b084fd9796778f52a14c653096dcd091912a2b12e0cd437a10dc218d3" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="06ab2f5e7f197fa6942ab7477b7c409090f2015f258f87a2d6a84fec779986c1" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="2daa5e2af45534a71d92fd169d11724875738ed97f330fef88b97d99c96b99e7" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="8d739d5d48adc7909b9b0c4de88f97c7d8d860b8ca8184e6b05fb97c497a41ac" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="293f2cc6659eeb52e0d4e98e56adeae50ee15f9faaf93dbaf9110b8b15793b6e" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="9330c9a127713629e339540a208b90e6f8640d0980766a3bb113c6d85a2b9b82" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="dcdfda3109bbf2b8bf8f6987f148f7da524d3e84ddb4ef1ee30f2666d817e17b" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="ec2022b28e5bf6223c4e39a490cd849722175de3dcd70c42a676ec27284d1b75" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="64d7d8562ead5d295404ffcd5f195ce1af43fc61eabd3d3b220972fa6e0bae84" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="e193fb0947ed6cb4c2219dba240f54bb414f166b3c077bf3af52c3ad6b33366e" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="84853360a8b8d31262e4543bcd0df0ad2af6df35ae5640548c9cf9cc878ae455" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="f18095ad063ffd75ff638abb6b0559db1398a484215759cb055c619e8304b777" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="1e3aa55ac005d211265ba494526f6ef5fbb88fdc31848dc28c7d559617e599f9" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="b473dda78d836a097fbbec9ab1e2e991c9904bbbbe700042553b0d1501cbdf3b" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="92b7f3865e9c46691d5e728a7c07c716c7e377da0f494c156598e1abd58a9f56" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="7da15035a98f936fd159590529f65bb3615ab3c5b4048c79111fa1cd0ac4ab2c" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="82c484b5d1f4144d068d7e210c7e19e7e6380e378011e9eaf8ca8e4be3fa8358" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="a88e6ffe884805caa0c896bf95653e4b8291f363f63817b91f30e2cd19235086" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="68089174d24e09e5027c7d6364fee762f44f01b3bf6020f9615819373ab1f892" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="67282025b51bc51746ca47aed8e022a0bdecb710c9164fcd5e5a8ea18bdb8d79" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="19fa19ed7f4cdf7e83fa4708f64b4ccaecad88a6cb4bb8fe55e4ed5d108aae66" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="99e00ed4abfcd70db2c9fc20bf74af25f859f79c99fc6e0d2f935b15c4a28a11" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="2eab8842b1b3cdabfdc18cd6435076ce453e91e0ebdce3d9bbd3accf94c02458" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="23cab3bceb34958ca85ce7b0cb223bd3337508bc1076175981dbbb672b322b43" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="202ed749284bb1d1ef56a79fe55af81ffd538802e2615835b3eef82996ff8e63" name="kernel-rt-debug-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="a5d1f2898723b68d6d1798e08a7f32a837f4c53d666f719d963c07e5052b1361" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="4505ae2c8ec17df231f512ed42b5f1f5d729c2f18172999e578fff2712a41006" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="7bd5ed7f4b1e3299ceb575c74b4bf49e6743bc96b76959d370180a099044f880" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="a722c39329a36710ce7f2913517ea9775085b47e59a4aeccf8d3af500f09d02b" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="6ca91ad510e86f9a113a0de6242d5eb2b9d5c714b20438bfe2721821b5043cc1" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="595c095b5f045db60d381b43945ab21a981666738f1bf0963972162cdd73ccb6" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="9a79b1f197ea72d5854a38fcf43700e6811b9d8b30e5e1ee700de0cd2a9ee373" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="0187dd44ea51f004b94c7d9f52467a4aa36a94f3db86e58e94f77441cf643bdf" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="5064988fdd11e489e62366339d3ef808711c682de175be96a076804e1e58bba7" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="e8bff2e04303354ced5628454ad30650cc6d7af3ef3ed31c0c87247dc57e11a9" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="1d8f4d9f06d678ce42983284691642fdd1c72ddbe1ea12bd207e3686985d123c" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="c8fa75349e98b5504b8998508a7bc94d3fc3d7fcafea7da1634538f006a8a76a" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="324d813651fd6d6fa40e59b945cdf5a3fd247ad67dc32294bb8c81872a693fd9" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="32ba4a6e944a5b1084d3908cdf3745652791ad0581e9bed0d1733fe871c56729" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="00b86fa69a14de7ee46614334afcd4a950e2700e1e5ee77f7bd5d4dc531700e5" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="efee08feb450abb22b832f2a393b455439c31473b54dc48015602812ef9a00b0" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="f1413397a32feab36e52e512b127aa290e5ff81facb4f04fb8ee7321646c6202" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="ec4b3d6b6d9487f7013e4ec7750460cd000edc9d7f67b8e6e337d978fc111d0b" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="0299aa6ca05be9f7ea1d60814658bf589252d5ea7ab8114c1ef23b938b815c1f" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="111eadb88cf23dff6c23e7168101969ab63b2d257a888a6d34e337077f53bbe6" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="3a8d94fb6897c7a38cae67aef874ca96f9517c8e1dc6488f772fc744830dd474" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="9613f49517e8a3fb483931f16b93a7d30f924215cebb1ce209d0795d7ca6cef5" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="d0507a0f602b842c3503511520001401390de904027910c0663b9b2418e96608" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="b50878524731b2ecade76c45083e9ac377e40688b75bfe9a199efc379a3b7e76" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="4a8cbfe0d645d8049c17e0c905388485c5c3551570c06e333ed838066cfed432" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="c712b7c2a41162913d040f9ff6c94abba0c5347caaccca167364c13c759eae14" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="6ab99a301f265fc3653b439376a909de331e32355cc95a8118a77f6950c123d3" name="kernel-rt-debug-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="cb1402ab06e0b1369525ec304e4eac536dc343d664a0e708d24239e34f19b536" name="kernel-rt-debug-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="7c3ffb6f7279a7f1babb239981c3d137d2db546c1ad4fcc30cd6cb3c9c85ba53" name="kernel-rt-debug-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="92523ee007d274d5019b2fb6553f77fde433c72ce2b1570da8028b4f7b8e3956" name="kernel-rt-debug-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="b0a337336e869f46326b17404b16a0bdaf4de6e82b18ab3041aadf9f1f12f6b6" name="kernel-rt-debug-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="c40c6129089c9864462636d0f988532aacc254f4080da4bf9a49a310624a904d" name="kernel-rt-debug-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="aa76ed4d9d9a6af18ff290e635c7147f26303708650cb9a99fd0d775116d26b0" name="kernel-rt-debug-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="582e2c504df21339fc6aae4bd8da09ce727759a651e3a923a94d4c19a945f0c3" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="78d3553d0d836a89188aa86a1863258594be575dbaf0200ea5aeb8a552edfbd2" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="c0a51719a8be215e770320cfc3089cb5eefde32855b5c09596b0961448c34386" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="4e85d7d36d8c021b9ace36a20c192ebafd328eb8fb4b9dc73100f7639ff9bf75" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="487569f19a9134f946b99f9043e6fcd4b59fa86e6259a0a70e5475fd9e66135f" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="18a8801287cef7c9268fa5f39ab6bb584c761786c31aba59010a8c5c1f4c066a" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="14d8d5fd8e61e1a1eaa012fad5c3e9546b45611db48f20898bb4fda60fe781b7" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="5ee86d6a8817ed1c2939e18d7a9c9b0ecc73e5c5e7af47b30504221654049863" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="d2d0227f79ff7854fa8b3889037401826af708803eb531cfe9f782a0f18af117" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="d7bda02c47502290606050517f699e07a67cb4f40dfce2dbb6f067fa4800a4ce" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="43c898e21a7352037119c79279803403354730f783960fb17ce77b4c715af3d9" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="3c2cea4e37323bc3ca40565e269b5ef5a5920b5a7aeb660b7f5edb7f3a2b0784" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="51772ebd5d07d4f115f962e7e27019014a43a06a54b4ff9e2a18dadc35bf3f29" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="52678cc29a05d45d8fe7923b6ebf4429947b3235d4b5b646cf5974987448e774" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="331b7e2b1a4fe7069ad2d22ab0798c649042ecb307b7cdbaee44c98e7c9e8a70" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="815532dff774cd9f5430b5700324eb34507fabe826c74c4f95f534beca16d2cc" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="3b00dd3acdd21722baac755dae86133113278e7120d505322952d450fd175675" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="5bb7732067e0172b5793ca4751e8697dd04a94cb4ab5abba48afb692338419f4" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="09df440c91552b12d6a9e6afaca2519ec71584791715fab5612762c9fe6758d2" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="21d1459a8e6e972fb6a561b84966408eff464e805fdb167c015d964c33061888" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="08773136f4106c6ed9a3f2891301ef87a097199de53c6f26db148d23c3bd1b9b" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="3686287248e931eb6ec57c4780bc1120d6df61d76970f9bd044dbe795e1d2d5f" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="340e921d83dcd8ea392af0039536cd9f6d2504b5d96b8a9786d5c1ea5c85f513" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="12fd4da2b8eed49b2f064cd4763331af8dcca9f6acb036e05aa067448d6a297d" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="721344fe08773c9d2017c90868d1303567c0cc81b73cc21d2a5a9ceb8abfc77e" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="17cd57128fe630279270f678f60f3e29fd3c46df6cff13c49c6cc0277ca96c6f" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="1323d508d9e229c979df7488bc6e3a532f5807ce1df8196ebf8fb55d5b9ad3e0" name="kernel-rt-debug-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="eac6015a7b1f750f48330b078897cfd5944b395957970b7f5f82702b4546c50a" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="00724dffbe0b37c6120bbbb5310d14cf018cf04eafdf5710df97afcf158eaf90" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="1bb94b7ff38188e1ef6b00c868acaef35645aa5bd6b2fa15087daec02462b6ce" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="bbb283329f289da0b0265f5bd7ede658b2d8952b22a5cdbd6108e756791af2c4" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="a927c9c1fdb4b60fbd6a02952db160f76b49fa04c86a3c0e844b68002849ace1" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="659d18b19612216bffa7f8aeccb56d123a22470352374e76f7ae9f1e25f3b8c3" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="734d43c18ce8276f578cc3ae56fa69264452ffa7a4eda928dc413ca114e48564" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="9b1d009837894e444da7e5b96f6e9bccc41b6f7500e6ac6e75541b6ad3c6cae0" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="1dbf78cc03444dee4caa9880970af3d44828c9c2c0b7361d99310ac9348f8a81" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="7f2835c2e9418b01c55aaa3b51796e20cfb9023d6a5ad7bb89d97bd2208badcd" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="d2c90f11db22e9b55ccaac4756e241a78646db2fca8db1ebb38ff3538686075a" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="97927d92aeb29945762c31286e71b63ee4706e1fb26931245f73798fb4bfe651" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="9a4095711fa56bebede53bf36f45060b46407fb832b1e7e963e2eebac8b275eb" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="2690de0c30e95bd324bbfdb389b8f4bd29224b8866a4fe5a911cd47763397911" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="3965aa359cfb5d9cd831db6d4ab11e98edd226defbef2be61c68991fe8b7f292" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="7a12eaa15b661118c34b59b218fff30d1a45f746c3855299b95cc4086953dca3" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="b808cda9ba549282e83e8f1d0123751bbab5b2ba054a1adabdb9ff3db665f02d" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="05cfb86e4173746a701051bb5ada48d488e1a5b9afecf1785ec12f163ba23207" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="d8538ae9a5297b00f78809aaf018ab7826190730957748017ae019c463805aad" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="0f4aa2a89fa5ea3f33b8bcbef4ecad52f87b4a2ba5f0b2b7e332f1a11624ba9f" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="3b34401880ef0a466ed3be48ef4c4566fe46b214ec7687deeba8fe9f4d1c9759" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="a5041143195e094cb81a0c634edabfd907b175463a3da0e245bbb3d4bb136cf2" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="fdd47f0996bebc1ef8570a94d2902076ffa4ab2343704ee00fbc107f87f0887b" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="a2dc7cde518db455243dc01c52602b4cf1a4ca9b35a2958ec0985821c2b51847" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="7d8212fb444c94dc59d104376d1204d83d00647efa71d2d8554ef989596933a2" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="085ad565cd82f9f6d08bac4f4a5a267ebd0d3e96f9eff325e74b8a0d3430fe1f" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="448ad2d807313914c3fcc65e4eb2edb85bcda19099280932c20c280fd6411b5c" name="kernel-rt-debug-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="59df5202cd014b49683d70bad7e67ca6c490792d9ba13ec499efd37c596f796c" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="ba1ba645b19fe87171eda0c40b6d44ea2eb57a352c14420a3b78dc5d04421a5c" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="2e86c37f22938bc6fb125f55e2321a2d693f91a195f771cb08ce8d83c65f2807" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="9a7f443629b4e611207aeec3d951e98f9d8643da8b25ce8adad4bcbc74e017b7" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="c81f36d870d4589c34a395266d0c2cc3d8ca6db3ce8c897c85ba3ea2e27febdc" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="fc7e4c489c7dfb2fff862769cdc7d840b4efd65cd5ee104f2c1cf071795167f4" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="577723345ac3b6bad884c930496ef249e53e5f8727bd9e6ce46d0120f82b435b" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="eca05d6eae24cdc5ea3dbbdefc2cfe65fb46ec214efdd09b374c5c75dcd63565" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="18a4a042ce6e45c57905b65b0035595cf4671cd718f4087bae57e8039df1356f" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="26f457ee7fa51e866d8cc4ce2046e935631de4e502f8f9b032f571f54f04dbb5" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="de9266f0cf9d908897456120c5260b6283db08da7d3002b3e4607504d11c2203" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="f3075cbcded0393f9790a61227935323a70ede4aadeca330e2845367898a5af8" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="319586875509874f31ed96848b7d7e771c51747233c70b8b851610c8b981a0a5" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="94a9dbabb46ff9736382d7976c9d808057e7b8c5ce4ea63654fd94224a22b0ab" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="723e93ffbf3a510ad1547deaa00deb233efe7e59fc30c0f89faef616a0064a2e" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="555503c4d68a5f3e2f7e6500df3947d5f4e40e153be4e877fe4ecc04b42e11d8" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="1acf8c5cf71a864dd9a5b843b997ebe88cc1c569166af1cf594c07537e47a261" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="0e271c5fd17a5fb6c056c265dea2ab090dbcb8d2aa32ce5f23ffac730a9bdef1" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="7bccc70652b0f225da4cb48e5e870c7778d8427a3e075df7296833ad4d580091" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="d20c6a4bb9647d6b17665a1afce0d83b8ecc16fa3e275d90b5dcd8a47e4be262" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="dc9624fc793d8eefd79fe6ebc05e01c95949c1e8dfaad5499ad37ac75c86ec01" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="c71cb487d33afea394d8b3db817a103b677c42ba267a9389818b9617f82fd151" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="4bb16aaf7d53914e060ff0337a0ca4d2c615705bc1797aa6ea8589b752747fec" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="f49f3e4207b26bafad1adb990cebf4134804b139f2559f9c10bd1e2a3f183e6d" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="c0dabf412f7477cb7288f24f2f3d6fe3f1aa78c0b9edf3f8b15a3205927d6483" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="b05c3d2e4749c337a37bfe680adfc6f82ca413c8aa05701b09b9be6b563c1ea0" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="a1ee6839e7bb94d5c242a3e5b18175427bc94f3860d0aba70489b67c6ebec6ef" name="kernel-rt-debug-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="a430ff86f89bf7c093f80827ab0cc6c7203c4eddb1d500b70707fea8e487f00f" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="a33b9636d0c62f7e91feee9bce9340926a6caf378072bc3967395f1d8bc05657" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="2a2a19d288413989563909a3ca7329ac4de1c915100d7a380bd267317ec2b983" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="8c28aad2fd6afa904a30e7b6014a2d2712fe2e70eeb4838b39d1a3c28569687a" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="b78b81f90013be07b3e4e57862926d745c8baef656da1d8c3449955feae7ffbb" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="9f99fee685895133bdf66b31a7d567a573278e276d47f4cdee4e9b8943f5522b" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="5e1eea03e61f0163a5f02aff97f488842e44630fea90e51d66de4e4c6fa3f9cd" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="ea3ca5639421e31c209b73760dcc8d00d286f19eace6066d23ce130e98244a33" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="a619ffc892b2c42ec4e9fa7ca531f4f0249fc8f71735b9af939f97d4736d2581" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="aed4faed8c67f0179f456f9076748f0bda32be730f3dba603dd037cd3291899d" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="5799db85e62db7f280f30e5b8eae9daac8f32630310a91b11bb6cfce504b456a" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="a556323adc01012597cc971da7fca0232fcdd1b80f1f25be1d8134d32c9e6856" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="df91a7960e8aa5f440898582fbce3e5218037d75986beb6fbd5e21d679d403db" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="0c2339970099b12c0af3b9e702127aa305f973ae0319764e93c4a6de3ae3388c" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="04d83a3fe8bfa9e092ecae82b6043bc3962b2b62640e8acddf71062330277f25" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="1ea31ec83ff997e8e417b6dfc8560ffaccf6482b2d8f47a9f43b6bc3205c78f7" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="0cea7113ecacb30c9b722e98942a28529820555e44d05fe19109727d79fb6756" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="5e50a82fa1ba034d6f93cf34be17e58ba1fba90820ff648c434620b00c648258" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="c764d226ccf8e6a4683d2d21f2f0d37597847b83157d2590ebb651bffe3671f3" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="0621de96150c2b458a8d25d42683e6282086e185b0b3bdf246c2b51b59264c4a" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="62ae7c1f8cf5d7a0ee1a4cdf5ac98f2caf7d85f192851abe6a2ee8b707c47707" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="00b25350a951f67e665e5d2c323a6503cf0f8bb5a9d6c2cdc9365de5e1ade902" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="8dcdd85d6355406781ac54b6bca77450d484ac502145932507c10e29d69d4587" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="6ce2f31318397c440b93b151cb7c880f81bcd9b6fefddf23cf64b022b88bea05" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="f9eebbdf2f5935eb7f2ef58ceedd04c5f84ec99930cab7716ebf299c25075dab" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="723b8519af9235eef96539fd6568c86e30bb35250805dcdd03c55c47513ef599" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="456730f58b9d101682d8e252467060b975b811a632fa2db3fd57d1945bced4d0" name="kernel-rt-debug-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="89c324473dec1716691c6a270d69f66ebee8d9b8244b3ba7cbf19d890779d5d6" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="5cf9c660f7a729ccfc8df450e95609bf888c8c6e207299a46df39658416919cb" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="89583c9b97c8008c82be77667d27b4a1b9e446137fe022710b6dd868fd321f81" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="de3eba0d67e86f00191abe109f166047368671d9fa8f95b74ba414ed60f6bc96" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="8e2bc1fbc28dbb7324ff39fe3160b81cf5352e3063cc9b32b01aed7b9e4226f8" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="73c3ce2de0c90a4401feb7a6e41299d5a82657561e3845ce7ca7de5ca976d83c" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="3982ac9fd76a651df65dff86323e80d6431f4577e2380ef7d0caa40ea8dcfe6a" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="8d4bc8f1092c5ef9f547cbd2e73815df4187eac801b20eb8df7c68bf03f996c3" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="f14e8944cca4cb403b30ef2c4f5c73e325928043e59f19f88003c17506bac9b9" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="58a2f0478e5af7d7ec78916c84fb82823fbf08727f44938296c6fa41c39ffee3" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="71a6c51ccff55ab8d92f1880c50ce67184d4b935618845dca9f12ec5bae59243" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="6b6d21ad62702e9079119aa275b58729ae2cbea9ecd931cecdddbb44563233d6" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="2ce1b6ebf44d4c34925179371f6aa12e1f66bd4bdeb8a5ceb77adfc6992e5fe0" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="bd5e2c30ded5a2712834e24fe93758014598719299132990256f0c2bfd94a8a1" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="c0ac539eaaeae8ef9b8b2a29d54a7c624e2825e7642c7744f7356580f8115b10" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="57898c2c3d5ed7f3f38396400b5ab77764a1e3cad2c1fc85a04f9e86e02ebc85" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="ac8e12cde276e1a224810c4c41918fee11c2e3bdc1cdf73810d8879a9dbc4a04" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="7748970a8e2ef3a7a6392f3099aff82e5dda27810b939c1dd51adbee4f220648" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="1d3facfc5eeea789a29757aa64853ac827e077e8172de9d3e154f85c1357732c" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="625aa2e126625fb449decababd5e88883596f173816b8091be7a3fe37d3c8d09" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="1c0f8c6e80a2b769bc73766371c1d4b01cde63e2dbad0a88fb80e7e575a76911" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="d248d2fd8d908b7cace419ab95c480032a7207f970ae426821f98d58b73e727e" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="71be969ccd531c9ee6b7778b60eb4c099fabf2a6183d6e8428d4af0ef89642f3" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="c606c5653481463927f503ade2229abec642b49f570346d0b4d5cf8680c39d00" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="4d1ced9db73a248e46d639c6398893dfb2a874b6f42444f8c446dbb2698b785b" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="2380ec1b44d2c0e0b51e1d86c5e9c814e6eab10a95d4267999cf1362480c76d1" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="8c4187507e98cccbbed6e97ece68472743e090cef5eb80cb849555c67a2f7453" name="kernel-rt-debug-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="cc1580f7b970ff93cb25f8b9c20c33054b8fe8177f27abd2e6d423c50f989ab2" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="a0673ef439a7443241f428dca9fda97b96c34be8bee56ae588c2bdf8f0408919" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="894d875c308fc7a5e7c4e46e860ea8c11a89e1935dae9708277f649f5e42c2a2" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="1a186fa3fc3dbe88a48d30618c69f1d8429fa764ef9bd9aef7c05272ec23a80c" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="3525c71c96b24a7daa17eab3682d19e509a5d3b2ca8a89448721ca2546dcc34d" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="5d78947823fa268fa153d0182eaa3a3e0c50b08afd6b835cb096abca36b0a10e" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="e760e8b646097ae2594d0788d32d5c7f0b65a790f068c316c03511d7a927b558" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="cd6134c4bd4b777b2f3026d207f5588368de21edb21eac5d1d50c35ce98581b7" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="e0bf2c748f1338df5b8ee5f1b4ff17a6b65fb47b5a7a6a23bbced62b56c6554c" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="941596c2f5328370534557ca679483e9bf183eb39ef6c9fd9a4a759ba65934d9" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="247294f09305b4074c8b5fdb307244e90efa6c79facb0b903c8f87ba7a2ce434" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="5dd41d2d8eadd061b8286d00ad20014d0045197ea1d858d5007cca69345a5cf7" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="931c2f856af6f4e2385fadd34718cc117adb3655bdd6f123f4bd1e67ad4ce35b" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="f59bd76d818bfd07eef43ac0691561cfdba72957d73fee6086be4552054ad1aa" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="5707084184190f7e905805ca37505d1cdf84a2024fa1b614e1c570c432b93a33" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="f86fcee49a1ad3ca08a4c40c5021aebb03b4fb58fd3f0b59e86d52e608bc7665" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="4351a9837aaf84af928f80a8050178bb54d629a3267aa44c4e1adf759f4a3f68" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="684834d2ec8e1f763a4916fa9f6a05de80f84b1fb85549a6d3259d656bd3b1db" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="592663f426d15d5a7af7ddc8e10bd31ab56679a1ec5a4a59eb08b1ed1cecfee0" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="18c666deb73c03899d9148b543cbf519adb2c64157d32c7a134c945a4a1cee79" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="224d418d4752854e626b06012627af2ad96081aa4b59072f606643902d23548d" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="1acc47e87ada82c51704dd57a3b6dbd7ab28f79f5a29cefcaabbf9b141af3970" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="1bc5914fac97f425da27f06f5b03d08fb2fef87e33cf73eb4e90af2af253fb02" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="e7539409cc99c8f5e32916d1805287c71c5fe4a1c16e426d97848c9920280417" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="636c4309af7bbb0d88ae494da15db086d961b1fbf7d51e4379b52d94ad8c4c5c" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="a690f4c81dc04ac3f58a6a1ad6dc979e74d96287bb626d2f5c06a95870fbcd4b" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="5fbdee846276ea7fabb7cb382b6421b435980db87e772f6753b02ded8eea9b3f" name="kernel-rt-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="a0c4474f8a34345118a74cb9f5468f48f3307e584934bb1b54cd87b64eb25573" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="7290ada5d0b003f2dbe4bd07dd99adc1abf26e238082e07eb7669a462f8dda03" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="6699d36af356be8663c76023f343f6fe13319dacc11005812ae550c780832d51" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="83d49596407dc5edeb2cab163c3b8e8573f3000981341900662e0ddf29751693" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="6a5e4258979c46bb892f6be9b59153e4399f170bf380bfbdd74f1a0456774b9f" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="94f9841a002173db9cae857a652bbf76aa0b254a3f7c0c77b8dc12bf769d310b" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="2300ae43203374f87f94863d46c06be71a7ba121c7c699addf926e670d39bb66" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="af8574735142fe85c038d888988f06558b59d3047f773e9e90c061ec8fee66c4" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="e7ce16ab83dcd8b5304d87e638d24945f2139e6cb7d484565b11a608c64a44c5" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="1e12f7b568f1f64dc845c46d877935b6932ccac6744c102ed8ec7ac85be2365f" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="315dcfff584a73992dd36cd94e894e23ed2c31c0803e05aff6b228dedc24af73" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="57ad6e1166ab60456b13d10f499601be7e4baa680cb40c8a2ec84a4977b57f2c" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="4b469e677996a1d52e39b11dd58c939e05ce5445fc349b76495a6ba8c66c4fef" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="c66577da21a7f7f345372699be31335127eaa48cd7c03bbfb868b483e30cbb53" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="0fb0b99f1af1fb2f0652cb11e9f40cb6312bf40397d6008b37f10ce35087155d" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="40fac4d9097399b888d9eea9ce9a8acd979d7f5b1dd1aa63500b2e9dac11ac9c" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="821e9f85cd4484ff8c4da9f34026d185b2b5ea68a94b9b5c508c3228eaaf3f47" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="582503acc27f9d743c10f624a95af308ad4ebecf559a1325b5652407be251c9b" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="410c63da75788704953d6dc4f860e51befe747ae47c535c0e01a1b75aef4b37a" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="3f009cde6a879f30ce8eb96b3ed98acfb5aca00fb66bedea4b057557cd122625" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="81fe17a88dc9991ce89b4a324b744eb4f3ee1f4aab6092b3316927ed410abf27" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="65de2338e93049271da0ab978922da8fc0ca3158d1f18c622ac3821939eeb8f3" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="ffa8fc35b003a5e435b73cec2c110a6f79b5074d81d13d3b9ee7d5bf5cfe40f8" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="881b429b898207263a53dc00a903a74e6855b60ec4ed4a99afeee159de878fdb" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="30405ac7a5063e65f0809027fa0e07054580778fdae2f9ecab5024a86d57c3ad" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="fabd298da96279b66c94945b91f2efcf179d758501c7535feb386902c6388e8b" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="34de00e421e79bee2e6b1eb1180d0eebcfd163a9d4e3578a083d41878f136020" name="kernel-rt-devel-matched" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="fb652b13ef8c373ca5d1fc4fe4fdbdc536f7d16c6aa0a705e9a665f0f0a622e3" name="kernel-rt-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="2498fd1d556cfc35b4d7dbc133f210a707dbae32943a95371bde1ed797f43d57" name="kernel-rt-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="5c49240b5ad52d58404dc4936e8b204e9aa86835adad4699769de429da699a26" name="kernel-rt-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="e9bdb5ee6da497d079de3654fd6bf2839f0224b737b379bab0aec85cbb095e4c" name="kernel-rt-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="fe5988b1cb2f517d8789786e4c66a8bbe08cdd7134bb743d94a64965b25437e1" name="kernel-rt-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="dc12ffd0b4c660ecf0681200f34bdffe64c5417ceaf266dc8bd3bf58e1a07f11" name="kernel-rt-kvm" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="c21f8035bde2fc7c7d9baf1bb62f02d3e7ecddaa4b500231c80acd7db3366334" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="d3405ee63fa0ef5a201fd3e3addcce5d01fd306295b1bbc17ef95f5e759d0570" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="443622326bdb55a68382db76c125509297349d033fcaea7e707cb7a3efc7d4e1" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="0faac30b8a4862e4d3e886996a91e8cc11585fc5b52eb4834443933675ad03b8" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="bae3a5583a0fee0b80f6482b396cbeb4ae139cd3c6e8399b2dfece758c1ceb76" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="b4d63f6ecf384f96e5f2f0a6b1eaceb0d188f3cc0db07cdb7e3fd2db5e5c1f0f" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="809166bce0cca47d0e52514b6ca899d11109c4c90fb1d90f96ac2fd8ecfd6140" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="e356560e9e21351b8d6bb5887b08d08005b535965a96b7ab24eb630f102a98f0" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="5e22661cf8e211fac73bd261f3873d72660c1cd64736118c717783756bb360f6" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="2b78fd20369806e8f25fee4a610da1fe48764bb3feec0ed49dfbb174383f052d" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="3a826e54e767e46948fb6c3798fdf9e97996bc3aa02bd29715577a2c7d0a1798" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="660103f1849ccd102c8d3397cd8d066553813c8215f8545a15c9b6563ec40a1d" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="d326d2a4fb61ccc1dcf1b1f16632b7105e489db0ddbca0233a1ec7b7cf3b989e" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="2cfce94492831098d3b0b9dd4d9fa0e38c091ca6f55bf0432f4dd72effbcf2e6" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="39db2ec57547fb3d7cdf8ab64c41037cf60688be9f711de30a84887bf6efc680" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="35e70099a3c6036bcb20076d6070efe3bed6946a2a1973fb12e3d26961311a16" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="d8ef60987a2f217e3927ca99528e510535289f7d82d3f6cf0899ad6df6a4cd79" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="2ce1d7f8843e09ce7c867726a5ab3a9f7c5fc2232a5adb3552c17905ad0be18b" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="4c9ac6ae514fa709f03d89505b969deb4f34cc2f7d9c64ef01cba66af9e12c9a" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="c617ad47f7dfe48169e8d6473bb6394979e0f27e2badb261b794fc5d91bbc86e" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a83a468c23d9c6ffba13a0d81d1433046ed041cc626c61cb79a621feaf181c32" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="26a6320671f2deb22972611602cf4ffbd0f3ebed4d70f685fb7c124d1b449bc2" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="f97b7db7c68dae74dcfd9305e7df0c6d0511528105e51c3e37e8f3662f8331b0" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="565537c88eddca03f0da332013718be060f3822fa4409fd788ca0cb3006a08fd" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="6eedc77f6d4f7ef5addc7b0e7d78f949ce531c949028024f6de99310f4c7ce19" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="72d698cfcda907231abf7370fff9f5b8bc2d7c71c5eb0452f67e220e28072563" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="b1a62d2bc8553f861fbea0bebb0256fa0bdd363c074fbe81f6a735699984292e" name="kernel-rt-modules" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="425c294cb50779e163816f0d049366e78133779195c2c479c87c43dad2febed6" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="efe1de4461c900721c37ae5b6ff2d800b4a968581338df5d4f05d63e62587edf" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="2f54e93a1560d2e07266070d720cad5b1e2c237a7ffaa10f7844d4de522619af" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="459cd05a8a8f70a2f00f760183e583c74be228e4365f37945512ebea23138a12" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="476579aa41253ae73e76ef5f07e4e7080ef7e437f71d25a2b586c3d3f1dacad7" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="59f35907aecbb4fbf5d88a3aea31f9d2d49ad1d649bf2dbb3932a9e2bb0bbcee" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="b3a8d93c3cee2c687bb416532f66a2f042cb228751c8ba8c951e10982297c507" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="3de17e86cda90b7454b6a70082099a472580504e17a51254b0692390d44fde30" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="e2dfe1c01d5b1c3a59001a4637743df5511a9121fb6fc4710b8c472cdc8223aa" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="0d5d18cb03771447823b25c47164d60eaaa705594f2c53d2a7353d210bdf7405" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="37040dcf831544120241bf908510af0eaf4c68c64a34e2fa92c7203190d46d7a" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="0bae6cab77e6602fdb8d2e8242d9f6c709c3e8b0743e1277f4e01f64261b502e" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="d4d6b16fa70e10b389237a4efa818c76445d70d9d9d165f140daf4efeb0d7763" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="6926aa722ef0e691049dc672408eb82f614b194752e411bac0a4814ad2e5fc68" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="2b9a1261f33fffb9fe2b13e7627112e34f90215cf5ba2223a585fa325543f1a6" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="bc2aeb688a23f0ddee2a4f480d2e7a24da6adbc6a3375a20801e88beed696677" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="f3f7f3537051c64420405d427d2d788a46d03b105993f895958e2d97a06fbcb5" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="b6400fecac9deb0d5c10e44fc29cf204171422ef73ed9c7a00a7888d11f170e1" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="cfc4a6ce7557105d0d9d2054b62534e3eca2755aa940891a9201856988150664" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="6e8b22056f7c77a5ff3e65fe632573402716512c49b7fcd1404ded818402b6be" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="932cfd46c913e44862c81a1091e7827168d1bc88fbb1aded248fe37a6bff13fc" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="52e11479760f5d54b798b19fe01137b886f7ed11e3bdf43dd6f50b3739b5f045" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="bfc556c6883b5d21c31fa94b16dd4d6622c08cd673d95832c01df75080a7961b" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="66dda2fffc837fb7b81474d279f80bfe26a4f0b58d458d89a2456cf7889f109f" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="aea985e3316934fc64d0caf9af28bf674927d3f965dcd8d97d4ba7c0a8f69ad5" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="43c78d5de91df2b0bbae6d3e614b6290a531f4c2fab2bd0853ddc5a1cb3fbe08" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="2c3f25d927faea54d615573214597de793f6ea59ebad4ffe55da7f8194e48e2f" name="kernel-rt-modules-core" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="3c7d5643790a940c41dc30a790fc526bec0fe0ca0474f3dc53ed6f9238844c89" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="989aaac87ea8e499be74bd9a8896899be33ff9c234394fef64bac553c5a8d99d" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="c70b1e7aff213a3ec97b24ac7435e1cb48eb01f8854fab6cae8dd3999405f474" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="a6a6b648e82a9268a341fb37f5e7fe0ebd46d866e5b41a3e1145e29e1efcd2e2" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="12ac9a7269cdb5894a625e3e11cf06f02b55b22c0ffd08dec7879975d0cf3ee5" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="1a54af9db8dec3a1f5710b3556a32fbe185323d08553ec381042a11313050a5b" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="9aa61339708f2584703056b6ed942ff47f90e4974b648ad0625cf80db83cc8e9" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="3718c6b4010ff908512fba533b151ede73564c0afc98b7f6247ee6c75a62357f" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="a10cb9e1b4e8928d6e47024dc4682527036f9554c55b05ed9a34ff338bf80866" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="01056949813c1a9db7399ab12b1a48f3febdebd7aed22c5721a81837fa9ab871" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="0aba5ec6586415b3999eebcdaf006acf72e978807e42c184f6b49b07c1bcf623" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="e72ef495f3a8df762ce50048c60d4f662ddd2cfcd76d23a046d477366149025f" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="d1177d4ad39e03b6e23ca02884f29adef5e6c1b2ee7051b404155384f6544f56" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="0eac3895ad5f60670f9eb23baa6b296d02610d50a0cc8bfdb2b6c3973cf73c3e" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="e342a98ee6717baab3517ca6dc6ee81fa438a91a56e7cd39b23b14ea904235a1" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="a0a5d2127512f9e7804252c5adfacd41e17acce189da668176113f9e307311f6" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="badb79cf1353383a24895dc8886adac19f20f66a6bffd8708ccb88bd80513540" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="5450d706a101f5c606b6c7ed05f0b9fe3bc60180c11bb6e34b35c1df9d8d487c" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="e01a6b66eb05a51e6a8941e2cb44addeafd166102138a22e1e30484e2cdbba56" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="e86031ba2c1174373cfbe6cb0399ad43025201edc40607dabd3cdb37ea2f319b" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="b5e5bdba103690939f9398ad14f1428823f12918410a4c84416aa9724afb42f1" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="2acf61e576eac33a689842993673cbe610046f15a75423a303aaaf194ea9d9f2" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="0b5012e4ea615be271ba8672f04ade66703f3f2e0d95b8f47655f9da4fe6d560" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="d9b6a5be7110cd52e4637b5dbbf99e28e06646fbff12974b195538698a6b0fbd" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="c61a7396786ab6b99ff942b22691ddb312cc754458762bffa9090aca09afb6fd" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="7c420e80cc6f56061701d265932a2fc330bf7819e564949ea50e4c8327b9a262" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="d175690c3719d6e9786ca6033a1d40ba9afc8467f06d93233ad37f9ee798a59f" name="kernel-rt-modules-extra" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="2a9259f8013cb84545a2ce6d5bb1908a41eb0a8ee41996d076e3595bc6f55f7b" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="a3e5393dd144a3dcae96e92334ba94a834edf899179f27186e160495690b8ea6" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="4b8d9703b5219d1e84cd959e55df657c27e45abac37d61c8996d9247048403a6" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="af358e14cfa9751a26e429296d8795499d4a20c380b84889847612366dfe949a" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="98b7fc065af601c02e78fe1416062ff0a6c88aa38e40dfeaec09947f6abfd743" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="08fa7546a53f11f5948c0bd47de24f1017b50fa874e89cb8a5db91ac6e6718ad" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="fcdf4a22a0f20d0b1aed59d06cc4916608503561bf3fe3599fa5a1215f5a4fb1" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="4bf510c3562dc579e5ad59b44a674f405630b06b4a094848deab9cc116d2dcc2" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="0fab6b5285d1a569ff143317d421f95c66eec92e46a79887ea2df993c8eea758" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="ca2d022691a9c3a388ea80ab6d85f35f41a92b3c195e4cc97b6b9e0f764d321c" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="27dd46db00a9fb3d265e6e18954a8debcbde1aaf3be5cf009a754f35e36e8334" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="2ef345d6f0b9970e25e4d174eab8664c06ddf74fc038cdbc121d2454bedfb0aa" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="2d4a2aba0c4c2b005ccd74d8db66ef7518ac7757ec0a208bdcc793c67448eedf" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="1a04cc2791c499c5ecb5046946d900769633da95b9e3a13b710ccab1418ba9e3" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="147fed2747429c3b14d73a78674f29c8e1fc707cdcb876255bed8ac0ec95be8e" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="1d03cc063b7337d4279c2987f31ee0cd221f880c0d3c6cd63172dfef51da202c" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="ef8a491c5351b8b4da9a56f73ee0985fa57a8be271feab63d2195a8fe577ce3f" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="16204b682777a61097b0a58755fd298b93bf15319d4b4d69a92f10f011c067ac" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="303c27a67f0f28c6f6005b3e26383a3555fe8826192f1f33674f6bb611ba99e1" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="7b60849c59c1ac06a68632b62075de13c2f515fce817e90d991158e89d20ea1b" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="37c4f32ca9fa3801fb7f26c697f7cc39d590d275d8d0f83f16c9cb40e24d6920" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="a9e403899c913b3ca88e8594e446cb2a1e972e3e7e6e22e47e4531e9e8c78645" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="d1722028d68d20475a26e6be5988be4a4fb345455dd5906e8fe4f699e7b586e8" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="401df0d23ecc0431c8a0584d30c3aea9e973d294f43d680839b4bc611739b84e" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="c86869c9d4d6aab41dade017e91dfbd31d4ac0345c322c250b2f4a7f226d1410" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="b9f030bc7b9c287827e11e4a9b829e11fcdd83e71a2d44b0ea77c96de4629058" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="f75017a506c53fffed423b458f49137870ef3d147131924380a03ea7d416ca5e" name="kernel-rt-modules-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="5c549ee46417651bc6ad793662fedd75fa12c95e0ebeda27b4b7e734dbda5f23" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="00196959e9ad6036162dab4994ac5e7c22027bb5c18f008e2ce26e8b817a5152" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="ab7ab5b4a04ba399c0725be2db7a145e35d684ce9e9b30fcf07b17cddc49d3a4" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="f5090a74e78b05b3a1539f326751b770b6ecc4a38d460b6c73c9a151ae18af41" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="32a687834fe732d8caeefeb12d057b5807baa57f81f795f6a3a7f7b0d76789b0" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="9429f638f97fdeaf7cb8614489ddd17b39e97b5f87388ae1d5e2f31b436b19e3" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="b98661e9bef1c4020695cd9c06df4489801c2eb4a94bf0f06335dd4d8deeacf6" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="432a3399f007f0bfa7d7c279543ded1de9a782460920c79dba22657019432b2d" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="2e54b72d97c71abb06419d1533b61cad8bfb882a1fcbaf8e67c8a8a2f4fcd8dd" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="c72e231a2a7be067c7704639bdce3b52c89d4e10c2c63fb75816e6dd0cf84876" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="ba21456def7addec5e2c5647b4d074277713a7aac5d8d7a0e274fed673423b22" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="02972baabff3a4ee4314fd42b16b5c986eef8aa5b31b8f1e7856ff89091476a2" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="07a832d23a608b9a75bb9fdd2e3ccc419105f8f939fe307147ce8d418e4b88b9" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="da20c03e7ae541050144751aef4eba0fd96dc3b02aa297572bd8eaf2cc60bfbd" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="21a360bae2587e39a8d0029761a80bcd496be0a4c17b345d6fa45abd0e9ce74c" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="da9c1312cb55ad956e98a4ec734945ae42e859eccb1942d26de6878b2ce5d27a" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="457ceb367e7b6bc379127e3c61a91f2e28eb190bad0bd671dfdae2acfd293b41" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="941d6ed48c7d99941017dc35ae681fe42be6c17524e3d34798aab18d8febb516" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="6037ddcc9f7de5fec2573a4ecb55aa98930906143f6218b2f362fd75ec09598c" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="5bdaf0a99e8ea8b8883d6647f74672dee8a0c35be5b6fc16939dafe6f8b0677a" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="302f00501567a21c308c0a1dfaf429cf0d01ec0e6b1c8fa9546e43bd7b8b9cb6" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="aae4ae568415aaa65c5cc967cef87dccc4609a2503824161b67888e779a2c753" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="810d1474cc1ecebaedadc6943078e6b76d54af98dba3e868943b9491875fe549" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="a63a46bdad056a7567a0f2124bb281d1b976a8c78d19b4105f6fd10fd6628417" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="698079470fe6d6fc523e81fba69ef5af81d33373bce550a2eb5be09f60b8337e" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="b6af3261b78ab256a54b396abe9f3db4c17f638e24ebbaa0752ea2ebce1471f5" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="0f249b06a45466750df16a9f1d58305f6ee1f9738480a08d120c594e6b158c67" name="kernel-rt-modules-partner" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="6d6ae7a96e371ead28c0932dca9cc64fb99c9485829e78972ad05f9401f13e04" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="125fa1432609ad20b527312851045cc73c1bb95ccfbc9188d51cbd189e94a5cb" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="13723e6ee6b10aa302ca00f5227e39a7f6c01aefbc592efeec4a13725c537b04" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="9e6e907805f5ba22a56e52ab5d2cb8fa57f4c82a01b8c8282f6866b91553b929" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="4fce15d259fe4e46dd8466e48425dc37a826181b7c8a1183c0335ad37f160559" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="7360092a2f5c1d5d3722256a946c842f879c25ea135b3bdd19e77cffc1f1ff80" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="a8b5cf272fdaf9dc7daae3740b2436c6ffa4c4b82256c3f097011fa4526fd87b" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="6360baf3eab78c0dbd219adcb0eff93523355ab818420d122dcea5ef288956a9" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="6c8e66d933ec76f456b9eb61acac8ca769b74d1612ada5e02b4276efa44ffcb6" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="7629f1fc5215a00428745acf78adbe48b393281b03b38bd54c9760bac4766f96" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="bec112100377dc55a957f03f06a26c9809c2a2164cefd5f9ea91ccc4a40d032f" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="a608bc4cb2b0d4721cc37992a224044a2d4511ba172d5947e61ee72645905fbd" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="e1ca0c190f4595191d530235fdad8c0f7941665f49c4ae7b61a46c869b844464" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="6161abdfb5596711c4232097ae5495e8c0299211857221d6e5b36c7513326d48" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="8b7a69685d3c9f86ef99aa92116ebe02563c3cecc43b0432c329de3202d00fca" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="1e10516c06fd3035e3df45d1ee8c3b423f6a841ed7cc087a0dee7c93d1eb2f48" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="5eec4d361ffd63f56d55c7eab2a828f793b32c7235f52979ba312083c04bc8ea" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="9c5d56d18aff2f63d4475b2b9696d57b48f0006e74e41d64d2f6c01f52150ed1" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="f314d9166b72746003daf10481f3fd3ca1394d326e3aa8dc0e4b9fdf120edf5b" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="d48e7cd7f6b4ff3016cb08edc5d272c966652f73f246849177e1c99652e51b1e" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="404a9adafaca200fde18645074123a4cd8d88dce6d6f44d433db0ad12eec2168" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="11ecfa32b12d8b7f4d4039178fe6402fd9990117992b214d76878b5b22e1c45f" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="ea2f1ca689fc4a7ae6701f4d210b155f1f7466bfd4c01b71fb6a22efd30911a0" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="c034a8eaed8549d3f10e43512c35b09441c778c2631f016e168c6d3e3661793e" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="16fc62784207d6b4a733854124882b9dfbfb96c14961d926197e85922932380a" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="adfb089ea562744e15b3f88856412dc55685f304b0a5762475fb1dae24f59c1b" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="94b685d45b4507c92f335bde046bb31369f067588b8975d8a5c16c695406b5bd" name="kernel-selftests-internal" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="d73f004c163b71a7fae10f3f7f6732e1478166cc8005b2e5220121542d39c07a" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="bfd154a7713506a1621a848752f394535e38e6f6c6880ab5ead3125561a78612" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="ad53e6aeb37916b9e48b7c2a4e5b8061c21ad2769e9cb0507bcd93a358466794" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="12d374e7639ee9caf8790cb3c17d9677387c619f9c646a080cdb01f3962e659b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="11fb81e9ca3f23ce2cd7f44c9f5f57a4aeca2622903765918017bc66f3d93234" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="5bcc39f69f42cdeb48a20f0a63e929bf59ddccd28055e567321f265024c4e001" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="bd707aeb5f87e7f738ff200eb74c3042ce70d954ec494ac6a670776adf0939a9" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="9561852700a51a73daf2f63e4fe3cab7a6cf2f766dc5e2cbfcdbbd39d413d400" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="9bf507545637d4678c37b108c8676a78a9ba88f90365436b1e27f2861737cf07" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="eee90420c9dc1da417e90b38ebbf9aed1dae8963af98bd38de2377a019959f6e" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="e8667ff5fe9baddadfe9361c391bc9f60723678588ae5fba965657da7134eded" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="f2ec2669c7cad396c7861705ad0d225b8e5f6eba1309fe5d89059074b1cd22da" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="ff619516afb03d9f0ede6c4a29b56b076a183a0ecc4d51f87b300fcc23820e6e" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="ab889819575f1196904cd1083acf8d52227c9b5a794d9126bc3c4bdfa0215a27" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="589e742533215805c392687e081fbf910f69e9069957f350c679b6e3736399b6" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="4f36baa7441c050f1492d7bb54d01238043c67ff628d4c3f3e302630d25164ad" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="c71c13701ebcebd9b584687dbbbd3c17ad2f849ec160ffdf0d2cb46fbb8b0d9b" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="c8cda7c87cfc80ae646631f57b34a631afc5c772b8fe64b4ce68c2abb15e5d41" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="57bbe207902b5329e844a3cbbba86263a7a841c3eab9a3751d505f62e4bd60ac" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="e6eac6af650661d60b7fe9d07fb9653ce63ca169cad21d89b909e08341818f7c" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="40f6186b05b26d9215a20d49812ba760fae54a6b5e7e186da9c905cfc154a6d4" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="4a83157b2b462d9d8b5e42441409cab01953a67106bdaa3e89c1bead86603936" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="8a45b624abb671079cfda17781c973ecbf8f18aba76b7949a7dabfd4870d9bbc" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="a3fe8ff6452405b941cdaada89f99a0873b48876efc1cc35ec35b6fa53012273" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="88c4cdc8b098d068988e666e75ecf0dcc4f1e813a6380935017456db1be18cfb" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="a791744a87cfd7650f75aeb3bf546643fa4ed112f50573ab5951aaeb94418020" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="2387b25f360dd0dde66710b4fcc344074bf78936e17ac4b2490021e17e08f7f2" name="kernel-tools" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="4f7dffc1e3d083081a60c2d0209f3bd25fb1afa09e5f53562051ad33f2a6f6f8" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="e96b8f8331e3fb8895e867689720bff3a915f82c293417de036140dc1639b3df" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="6d081e97010212795faf6cbfc4eb50e88dedf6099568f709eafcae260ceda3d5" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="25abffe172996802ae1c933e3a98eed9b22ca7a2aec5fe4e872bd23d1a48a8e9" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="f22c0aa2b83240cb141fbfe0b8bc86c3568b4c452a1bc9c97f5d6dfb8d97e305" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="3dae5042d957cff91b8389233f939939ff97c62089978db342de9bd8879860f7" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="2929a7c4e9eb6ad73897be9a74369b63fd4d943478398f37eca6519aa9aa6562" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="e8ae51cc498e1debfa28aecaa1c17de27d8c101b7296b42e85d9d42091e6a0ef" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="c7f6922264b290be0043f1ade8a17bd0bf42dd73ea13a3c09edbc5cd21eb44ac" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="eaf7d9ad9a5fa4b0b7d15d5e238749f04ba8591a8523f965b16bd2016d3f43ce" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="29c4b7e00114730d04a268f1787e0999d79e6852a421656b9c8963dbaa35fad8" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="40f1032208c7138246c457933eaedad54da474a41cbc2560673264e6b4de8d84" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="ce3df6f84605cc5cc81cdcc334d2c19ab98d92eebed5acc36772445a78c10407" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="fe925b6ae8a21a09836af00073fe009b96d2ef268bf5b7ddce8f05790fc44d83" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="fc8c854990b24bde674133f4ffe6b53edb26aed122dd655e0dfc4f5f3c2e9ad7" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="41821838b3d6e9bf85d01abba2dacd7690c9e670ed57bb0d1d37dd1fe0a41466" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="f3b0cfa0c43c2002eff82053eaeb25c6b3712348fbf7dbff46c3e8671c5777e9" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="181e0545199bc7f615865325da70961ba2a04fda2b653109852cd66dfa19e655" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="a25ba904f7490a6a6cbba1326899dcf4c180936e73b3b58bced4d37893875342" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="6810fad01d677185939ff0edc5cc062999496443120c104ac3743069a907be81" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="d8edae7a9b5c049b9cfc83211909798e071c34347c648438f444fb4fba2c8a2b" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="e5958e204f3181c5cf699af73b5621ec56cbfd82f4987f4fb0e8c57a25cdb827" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="be0771a1c53267c5d789ccdf7511ab8cea201443ef2e37a416a5c6907f590ad8" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="bed75a336036483fd72f273d08092704153bcfa2de1ff017ef5018eba2390ddd" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="e21f1c3c83b10731d537a81e7881053eca31e4b435bf48d40d1524fdfedc4cd5" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="28d1890030684f184bc0b1b87ef5b3531208a913bbb6c44df839de69a4c725fa" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="7604673ad5f416ed275367ddae49e1fa9200c4e2f59b0b183cb8896c539114ab" name="kernel-tools-libs" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="a6ce9eea9beebcbce647950db9d1b3d2b6f5f63e76a752a2ed7ea2da708f2310" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="7f3bb36aefc804c78ec05e0c1a9fb7218bb5df3fe76c780f8677eabdc34828e6" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="d8453ee189c867d48ca4c29d9cc03aa1969261b7b7f7fbeba526c8d353359d0b" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="626c811c017e22abb8336472b28ae7baa3a445d490fda76ea4b147d1b3cd885e" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="ba46ba791decef3ac857bea53f98ce26f0b6c57d577299e0a6d17f657a7eb98a" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="b3634209ca7e57c18d25fe3decd945f5f924da92132e8ec0a7158415e0b0f958" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="c7d4bf56b1506fda81746cbdeff41618bf6e23bf23860c6a06172a288813cf56" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="006ca01bad69cf706254faa3a754fd9737da531828c063908835086dba307db5" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="65c4023f0001f5a6cfce763909a7a83bb0c70295220ba49d1eacd77f24598245" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="2ca22460d81be1afad460ee005aaf4dee47cdba755d60d18a9ba400ce0241a97" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="852b6b021c91cfc7ed84b41e85a1254ca32cc8fa1942c15d02bd8e956fcf0b47" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="b42ae6ef0156aec39007055568d8585ee5b9e5aa51464194dfa9506effe17aa9" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="4ad9cb583ab1706b448bf62bebc11e14cafc5583a7c49dbae427214547e95c25" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="6636c091647738b72bc7e7de7e0c1791e92a653d497a2b4bcbdf3962f3c32720" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="e1d93cba07c32d8aa067d23084d19707707fb7b5623ec671482470ea013efa63" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="bebd2a01f22aa1462bd142bb32e04ff3f2ba72edfe7ab114a4c96c3bd2e61609" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="80d10cb81cabd37252b5f739e9d984a571812481d841d7c8fbefd9f6a88c9b36" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="bc3154e907d36c0ad9b86eb5dd845e0e06f50b1585a532391c92c5e1ea1ae6af" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="85f35d2f0eb528bb0d04e6ad6134878ed823650d5db38a5426331a9c0357bf4d" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="0f700189e7700c6c660d2f6260975331d2b202becabd2d098c23c4db6ae6c113" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="f72949d92ec2162bc66b00997e205aa12a67c345606703f443f3863d699484c2" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="cdfd63ecc2e25e0d0660bf124b1f4339baa8c493e531f6851600c33c1f6035af" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="3db0ac600096d572847e171e9b19d5d87d073e2066a5a351adb0885d0694a6d6" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="99baf553f994de54ec7c8f41a1023cbd4246e0c3ec66a7dd8c8fb9c9aaa57115" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="1aeaf8021295cfb85e615786ce27fc19d84ed8a32a017e4be0f2d6784f7c2ecb" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="46f7634fc962aeeb6289e19922928fdf7d149ee2d9bdfb18892c097f3f38cfff" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="0f4a8c6586c550cec420af9087ffbefcc9532700849f65fcc5bea6f2ba113409" name="kernel-tools-libs-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="0eef699edb6ee7da1614a8de0403675b0a591bdec4a1f2bc151fff749aefd41b" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="333cd82c7be1bb63472852c3848e9f6bdf446effb6a3d63d11504d30aa3563ba" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="7814ec7fdcec9308bc5471a4237c798cc1cf95572b50a6d6730158952b65d92a" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="d34ab7c63371cb8afb78d14e98f5f4fff4ad530a54cf457d9e7bd5a0611210c9" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="da4e6298d0c419168901181fc4df5a319ded67c5da57c4e3912c74b3a9df145c" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="a01b59b34f9bdffadfda7aea11c29008c222716c49b990a8353af04987606821" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="20b654192de7f5469d3db1d9194c7fce7371c12efec3c5164e4373013affb374" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="4e0bd69920ccda6de58f281493bed83b636a0349242fb77c37ae1cf1ca242a60" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="553455eaf621c9e8d7499d940cb6d28dee0875fcfeb9e37245c4cb8b59af8b71" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="0ad3d0e95a14e5a43ba3f923974f9eea9a5533fe7db5d7d34dc6278897f98ddd" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="28ebc48949ba672cd3aeb9fb94d219baf8dfe95c91c72ed53c46f0c1881625cb" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="fbf32017d8515448d5a251f44e54d4fbe9025109f239bb0d5377e4423d5b178d" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="0b202a27e7e101087a095db77c6fd1aedde280786e2482d2657b3036244ae667" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="c54b845dd64ef409592ee3f3d0adb5e9f13d490c49611b630658cb3e191f9bdc" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="c4b6ac6e2bddc2762e947b5667c7bf07d3140e8d6dc4d5c65a24361ff215847a" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="211c1d82c474a8e153feffe29347575aa3eda3361e0ce066b29777238a257d7b" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="13624787c5b16ed3f927cc73b0a1fa1fcbf8d7dd91ee0a17aa12593a4424c00e" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="35692bb4214da07b31b8a479db663acc3902e38673997a76aee630512a6ebfac" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="eb5f31bfd06a05193eeb9f6589c9b2ccbcc581fb05deec8f78f27120a426f3b7" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="5643ab96cd6007e58e2edfffd08fc2dda500839e728257c04fb737d38d136b07" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a69926d72d31b0cee8caa4013626646d0b1e796c9e2df5fe89a4c8d5a4be4938" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="5fe6bd4a0d81db82cf0f834f2f600772410d54ee880cdbd502870a7bf755174a" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="ab062ee2bfea8687d7a2eac8e3761b7952c3597547dfc7b49b7ca940dc19a98e" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="4f773e1cdcea8ae48661cf9a76c0458f9309a233124b92e933e060e333d9ce1b" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="4437be672d70227b74ae4eda7986713385ee944ae06f1d8477a1a0738b648f28" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="3f133e88b29a1617a40cafaaf7aa86dfe05ccbcf5e16dc8e04b17b9698a9eb23" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="c8a19e20ffd789c2d650d12469fad6ba9ad0b38ccc71c59d4fa95f0225f99e1f" name="kernel-uki-virt" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="da2d525158f96d6eb5916e22f96be83c2373857771fb7ce8efb18b06c8b9ff8a" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="3a3c50b48c65f3495370c6f836c7d069071a7b1481345bd80c8e93a8c6f0a183" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="8a36636eb4128f67cb2dbf045fd95c3e9efa21e2b34f8a2ac7b8d63cb102c76d" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="3da6cdc27368273e1069c5d724c1d7456528a97d327256e5a983a1b5d90c62ec" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="a6e88d9a3ace484130f520b61395373351f1e17e2e441331bc1fb13d2b9af8a3" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="17a824e395cf49fe916fbf998253fa90fc2925fb2204fee8a7f0cb790c485a89" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="efa3f3701fde59b0434cd89c80434a8f70c8b301a47df82b50933877b7b06618" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="df5a969e4e63adea759fb29f1e9355dca61699d9f97af6a0ee8aa92242b00e51" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="5a40e7c4ed280eb81c6787eec6ab52f91d7712d695d2bb19db6deab879aaeb52" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="e792175607974ba19e5d439976d1d1851aa14786904f18664adbc3964be03be5" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="e60d79763b413fec7f44a8ae606ea298dceb4f1318809e3285f7b4228199ce05" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="80fd6806da6623a240cac419cf0e62d4b4cde96946d7041e9378378d5c719f20" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="f15bdcb2348cd0f2d89975d43395adf3ca7798d32f5a1024fc3048ea6a0b9bf5" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="14d7e8024ce3d27c39c2989f721d0bea3e06ba168a4ae6910ddec218ef9a29cf" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="832b1c2babeee0f6331053ba609b427c00dbd9944df309885134e43a450f2855" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="02b2fd55eb0ac433c330b7eeba20ef674dc26889f5d611029588cd880007600d" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="8620d64cdff0f7de0e470395f8648a927ef7ec018e22aacd48231a6449639004" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="616c1093bea99548509428a6cc9af63b36ebdcd1b2560846da26003166a9c0a8" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="01a7b7a69483239bbe2b924210b23dad869d8172bc13fa902ec4e2fdbf859f97" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="1280b8a39d38b78c01eb4f75e897f8d23812ccce594e87956075159e988b4c94" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="a145722a1215fa41b255a0d9bde3d036616ea04d9c87895ce45a585fcb842ca0" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="7c924e3fd770621a8bb61bbf289743b680b4954a070a348a136ada54a773e397" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="556179853445e5bf3e93cc3877b2d54b758090be7db058beab395152967cbe3d" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="b53203327197521e0fe8cad757f686ff6ec7081b63bb23d8d3ef2052b9705423" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="804a4d65bc1940eeb54105284cdca6690561ec03c03bbca40089831cfd40d34a" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="e3d570d2e58439d6e81cdb3ca6c2636d3794dae05a1774612b6e33f647b32ee9" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="81f220dabce8eef4579bbb62a050a150730c2f8c402dee0f8427e83660fc353a" name="kernel-uki-virt-addons" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="68407f3ff476454c84e3271744fb3baf22557a1b71ab30f3a90d366215839aba" name="kmod-idpf-irdma" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="27.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-22" date="1749556800">- Bump release for new kernel
- Fix building on 9.6 using backported upstream fixes</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-20" date="1746532800">- Restore QPN workaround patch, as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-19" date="1744632000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-18" date="1744027200">- Add patch from Google to enforce local fence for LOCAL_INV and REG_MR WRs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-17" date="1742472000">- Revert QPN workaround patch as requested by Google</changelog>
</package>
<package pkgid="a0269a14ada34a066c8732e0ecfad5c0e0ebcff749eefa459d8c015e705588b7" name="kmod-idpf-irdma" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="28.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-22" date="1749556800">- Bump release for new kernel
- Fix building on 9.6 using backported upstream fixes</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-20" date="1746532800">- Restore QPN workaround patch, as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-19" date="1744632000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-18" date="1744027200">- Add patch from Google to enforce local fence for LOCAL_INV and REG_MR WRs</changelog>
</package>
<package pkgid="9718e3685d01f84c4937fee38379b7ff3cac6e131fcf7005ee5159dc42c609c0" name="kmod-idpf-irdma" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="32.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
</package>
<package pkgid="c905cbf7ac42090c63cd195fa49770cd0c6b6e50dc3601a89c4afc1c361c94ba" name="kmod-idpf-irdma" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="36.el10_2_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 0.0.129.20_0.0.647-36" date="1781784000">- Fix EL10 6.12 build: replace removed from_timer() with timer_container_of()
- Fix irdma EL10 build: handle new ib_dmah parameter in reg_user_mr callbacks</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 0.0.129.20_0.0.647-35" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-34" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-33" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
</package>
<package pkgid="ab348cbad794dcbd8de304d75d0eb53b7cafb7fe76efa900209d26a4b5ecc327" name="kmod-idpf-irdma-base" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="32.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
</package>
<package pkgid="85f63f1ffbdf76f91bc77a6a5c85264bd6ec802663dbff9e8695d5b4c969e746" name="kmod-idpf-irdma-base" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="36.el10_2_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 0.0.129.20_0.0.647-36" date="1781784000">- Fix EL10 6.12 build: replace removed from_timer() with timer_container_of()
- Fix irdma EL10 build: handle new ib_dmah parameter in reg_user_mr callbacks</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 0.0.129.20_0.0.647-35" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-34" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-33" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
</package>
<package pkgid="bd9ca024ad02669f6be87d7c9f9dddf991729f9d77e41f6d832894aa510a9cdf" name="kmod-idpf-irdma-debug" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="32.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
</package>
<package pkgid="ab4aa574dc1ed5da17a28123f0d9e1b3fe7dd14bb9eec3a55a233dade6aa1b94" name="kmod-idpf-irdma-debug" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="36.el10_2_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 0.0.129.20_0.0.647-36" date="1781784000">- Fix EL10 6.12 build: replace removed from_timer() with timer_container_of()
- Fix irdma EL10 build: handle new ib_dmah parameter in reg_user_mr callbacks</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 0.0.129.20_0.0.647-35" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-34" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-33" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
</package>
<package pkgid="55912f4ba3a69e694c11b2f18d2f7be397ab929323685336b2de9faab1488476" name="kmod-idpf-irdma-rt" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="32.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
</package>
<package pkgid="5564ca73577dad86e52485ed13b352ce2b0475c6dca55a92798cbf422788f975" name="kmod-idpf-irdma-rt" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="36.el10_2_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 0.0.129.20_0.0.647-36" date="1781784000">- Fix EL10 6.12 build: replace removed from_timer() with timer_container_of()
- Fix irdma EL10 build: handle new ib_dmah parameter in reg_user_mr callbacks</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 0.0.129.20_0.0.647-35" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-34" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-33" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
</package>
<package pkgid="f273cfd39e5d213810da961c72260111469a7c044aa9f5b51a7c6ba30ccdda03" name="kmod-idpf-irdma-rt-debug" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="32.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-26" date="1757937600">- Add workaround for CEQ-0 interrupt issue
- Use CQ ID for CEQE context on GEN 3 hardware
- Increase poll frequency for CQP completions
- Initialize cqp_info field to avoid resource leaks</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-25" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-24" date="1752667200">- Revert QPN workaround patch as requested by Google</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-23" date="1749816000">- Remove unused python byte generator since it's in a different location in 10</changelog>
</package>
<package pkgid="acd53733d0076f14717119331d9594323d3be915841b8c1cfa23b356d50847a0" name="kmod-idpf-irdma-rt-debug" arch="x86_64">
  <version epoch="0" ver="0.0.129.20_0.0.647" rel="36.el10_2_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 0.0.129.20_0.0.647-36" date="1781784000">- Fix EL10 6.12 build: replace removed from_timer() with timer_container_of()
- Fix irdma EL10 build: handle new ib_dmah parameter in reg_user_mr callbacks</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 0.0.129.20_0.0.647-35" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-34" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-33" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-32" date="1764331200">- Fix build for EL 10.1 kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-31" date="1763640000">- Fix metapackage requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-30" date="1763035200">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 0.0.129.20_0.0.647-29" date="1760616000">- Fixed internal secureboot signing logic
- Allows signing of kmod built against 6.12.x kernels in a Rocky 8 or 9 buildroot</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-28" date="1759320000">- Fix timeout stall due to few pkts inflight
- Fix a race in txq wakeup
- Fix re handling
- Add no_stash mode</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.0.129.20_0.0.647-27" date="1758110400">- Fix FPM address truncation</changelog>
</package>
<package pkgid="ff51ba5efc76af3f0ee8f50fd22b63efa26025628bfefa965df1b0fb1d6e5231" name="kmod-mlnx-knem" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx3" rel="9.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="fa75345bdfa7b7a07c903a7af7816bb518eff04d003a5fe7127852571ba4b97e" name="kmod-mlnx-knem" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="b1e781a235aaacc12fa7a428fefcefac0b19d95879319a65a1e9868a8905fe84" name="kmod-mlnx-knem" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="eac40aacb59785e239578e64b6403ce29a73cc1c2486af811028a4284846bbd1" name="kmod-mlnx-knem" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="9c7daaa5294fea20a32b4426e06553f5b78183dd09aaeb5c070e6ece7b40268f" name="kmod-mlnx-knem" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="1a82808e67f76ff11026b1070ca6cb88d3cd10147343a597c1fd7e96356fe728" name="kmod-mlnx-knem-base" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="24175f8c4f468d264b352f379e8b169fac581e8cc5267687f7af219aac57871a" name="kmod-mlnx-knem-base" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="0be00145ea603bfe7c34691cc8351cd3f0fbedb3891ef813dc65e1e166f3a467" name="kmod-mlnx-knem-base" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="bc0ba0734e1a7866ab756c73510356574c7249caf1ad3a0c677b15f0859432b7" name="kmod-mlnx-knem-base" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="1bb873e32988efcae84570f5c18b8fea5db30179a070621efd8f6023ef869fb0" name="kmod-mlnx-knem-common" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="97c8ca6c8ae1c91b023fe64ac2f6f33140f262baef713292e9dd8940c7fab95e" name="kmod-mlnx-knem-common" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="382d549aea1d6a5ca88b1fb571ed57a75f28ca3bef32de3968fec5d08776a1e1" name="kmod-mlnx-knem-common" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="f774f03a3358cc994f0e39115dfcb8f8e913f37c575c67ff65301fdfdf5fa391" name="kmod-mlnx-knem-common" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="71039794395a3b3415ddab8e9c19ecc82415209289019b2bfb6d4e34490eda31" name="kmod-mlnx-knem-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="9e1602e48b612662622a9f8bef1b32bc3c6c1745fbd74fbbbc3a6841030784c1" name="kmod-mlnx-knem-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="bc0661816a2c40005cf9c331b04b559cb0a42d8e48fd1024b9abe227c5a98c4b" name="kmod-mlnx-knem-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="bf97376eeef79caa78eb057325e695cf18ee1cb99fe79b1f1f05771159d98e92" name="kmod-mlnx-knem-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="69e4208e1bf8efcf6516b50d266f86c30f557acc066f156315200a88ef1a3746" name="kmod-mlnx-knem-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx3" rel="9.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="329265cf3ea61b7e4cc5bdf8e6a3d8bd602eb1fb33f05629f7c20db7e7c3aa7f" name="kmod-mlnx-knem-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="aa799db67b19a1775e9675801776c7f3dd98969430cb2d8a00251e897594028a" name="kmod-mlnx-knem-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="3d618ec8600219f52d9437f569fd1f94117be7d35b10440a2e1ae6f1ef1e1e79" name="kmod-mlnx-knem-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="f30afea118272a9a58cf434ef4b412996e6cd1ec41b2fc26616bdbcd56886e8f" name="kmod-mlnx-knem-devel" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="40bf8365c4e59c0d6c12063a57b1166efa16f4fc66aa6513a0748071f5894dd7" name="kmod-mlnx-knem-rt" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="8b2c215c77fb64aba4f4bc9e02c3e769d0879ec0485d3b6136c6df8441f99b46" name="kmod-mlnx-knem-rt" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="6579d6fa2de5da64bd30ab0f8f74591dac425e1f59aff2f69020f68a584c19ff" name="kmod-mlnx-knem-rt" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="168d8e1140a7e4e74982de87940f96c73a3e3dec2de68c2be3768d4c5d0c33a9" name="kmod-mlnx-knem-rt" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="2c85683f89ae40e8cb2ad799e3c42a379ab6b02819d1e39a060ecc3db793e0bf" name="kmod-mlnx-knem-rt-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694401">- Restructure installation paths to ensure weak-updates works as expected</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-2" date="1741694400">- Fix postun scripts</changelog>
</package>
<package pkgid="1e9d837a90caa82a51485c70c6399b44cc7ad5ae8203892b85e62804ea368ac4" name="kmod-mlnx-knem-rt-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-7" date="1749816000">- Ensure that sign-file workaround only applies to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-6" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-5" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-4" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-3" date="1741694400">- Restructure installation paths to ensure weak-updates works as expected</changelog>
</package>
<package pkgid="6e06f40fe07f2befc68ba29cfbf696bac91510322218b71ba2d0f5f42b32b3fe" name="kmod-mlnx-knem-rt-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="7.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 1.1.4.90mlnx3-8" date="1750420800">- Bump for CLK kernel rebuild</changelog>
</package>
<package pkgid="0dea0787cab8c5d8039a50283228db02b541f3c8a2de4ccbd986ac1fc08d74de" name="kmod-mlnx-knem-rt-debug" arch="x86_64">
  <version epoch="0" ver="1.1.4.90mlnx4" rel="8.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-8" date="1782129600">- Revert to -4 release to avoid clk and 64k repoclosure issues from requires</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-7" date="1780920000">- Bump release for new kernel
- macros signing fix</changelog>
  <changelog author="Joseph Tate &lt;jtate@ciq.com&gt; - 1.1.4.90mlnx4-6" date="1776945600">- Replace clk6_12/clk6_18 bconds with single clk_variant macro (-D clk_variant=clkM.m)
- clk_variant presence auto-suppresses stock build
- is_clk_kernel=1 (legacy clk9-x86_64.cfg) preserved: stock runs with sign-file workaround
- Single kernel detection, BuildRequires, and subpackage generation for all CLK variants</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 1.1.4.90mlnx4-5" date="1776168000">- Build for all kernel types (stock, CLK 6.12, CLK 6.18) in a single spec
- Replace is_clk_kernel flag with --without stock/clk6_12/clk6_18 bcond flags
- Auto-detect kernel versions per type from /usr/src/kernels/ using +clk suffix
- Parameterize all RPM macros with named options (k:p:v:s:) for multi-kernel support
- Add BuildAllVariantsForKernel/InstallAllVariantsForKernel shell wrappers
- Generate correct subpackage names: kmod-mlnx-knem-base (stock), kmod-mlnx-knem-clk6.18-base (CLK)
- CLK kernels auto-disabled on non-RHEL-9
- CLK signing uses stock kernel's sign-file (openssl3-engines workaround)
- Move kernel-devel BuildRequires to top-level preamble</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-3" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-2" date="1765195200">- Ensure that devel package can be installed separate from the kmod when used
  as a BR</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx4-1" date="1763726400">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-10" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.1.4.90mlnx3-9" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
</package>
<package pkgid="8d557ac8d648d3b60e21aeae376eeeae356719e49222641ff1329dda03ebd336" name="kmod-mlnx-mft" arch="x86_64">
  <version epoch="0" ver="4.33.0" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="88be30ad8e9b1ff3b6c688f98c0a713ce0bc3b577f9c85d1fbca29b806d012e1" name="kmod-mlnx-mft" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="f760a46ad76e5c4be79fc36cfe918791a4b9854e98b14a790345903d6cc53401" name="kmod-mlnx-mft" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 4.34.0-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="b7cb712969ad7127b77b25d3b2e13ddaf41fb9fbc1481fc067bacf82da5d61a7" name="kmod-mlnx-mft-base" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="33c84158ac61625aaf224001bf83a63e69ee2779e8cf74a4aa30fcc28c29e7e4" name="kmod-mlnx-mft-base" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 4.34.0-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="3feff7c77fc7266d84237a3bd1087474dce06f0e43f5c6fd1180603df65e1a04" name="kmod-mlnx-mft-debug" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="dd2cb2ca27488a8344ad8a409201c9c08269b022aa35a808b23de1adb61e2ad2" name="kmod-mlnx-mft-debug" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 4.34.0-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="5691efefb271dbf7965b8e2e35d2fcc6c3e5e08bf4930af3e79d0470cae67240" name="kmod-mlnx-mft-rt" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="be96fa7573c955682f3864339223b6656b052b42fc35eac02d3234c36927c889" name="kmod-mlnx-mft-rt" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 4.34.0-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="28f8907db5560d211b12e42fecb1cebfb757d3ef98566aa08616ec67703177ad" name="kmod-mlnx-mft-rt-debug" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-2" date="1741694400">- Fix postun scripts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-1" date="1741608000">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="2c78cddd8fbc7b3abde6d57a6de92118e8e30955de65a3e6e3e400277615420b" name="kmod-mlnx-mft-rt-debug" arch="x86_64">
  <version epoch="0" ver="4.34.0" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 4.34.0-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.34.0-1" date="1763726400">- Update to 4.34.0 (DOCA 3.2.0)
- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.33.0-2" date="1756814400">- Update to 4.33.0 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 4.31.0-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 4.31.0-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="39585d5fbe2c1696bcae62810b3424307135eebc0ed067f83bc7b399933306d2" name="kmod-mlnx-ofa" arch="x86_64">
  <version epoch="0" ver="25.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-9" date="1742472000">- Fix requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-8" date="1742299200">- Switch weak dependency to boolean dependency</changelog>
</package>
<package pkgid="f113a91b8a7494a6fe40c6e19c1e09fe040eea13673b01ba4baed7eed08c1c59" name="kmod-mlnx-ofa" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="f5dabc355ab19c597311dc2d2ce96050ac31008276bcba1bb614cadad9600d38" name="kmod-mlnx-ofa" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="0757cecb736b3fc59d4a0f88a454c8e605b76ebf8b0b1deb68e9238e049a17ad" name="kmod-mlnx-ofa-base" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="9b43523891a0dc379b35e59231203f4c4c8bfeba8ace1267d621d59c07d5f061" name="kmod-mlnx-ofa-base" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="a8b18c4086d354f4aa79f6897b728b7f3758c80aba12928ee70482756ee121cd" name="kmod-mlnx-ofa-common" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="feb0cd9db42abc24137c94ee4dfe9906942235e097a4ee8e6dad084d08a54434" name="kmod-mlnx-ofa-common" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="985d6ae8123a3b3fd562b9d58a5e7fa0d2781995791c6fed86fe8e35f420d5d1" name="kmod-mlnx-ofa-debug" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="dabd6e74c6b15e1f02119ef52a9f5f41b8890badb324eb40830fdf7d692fbf22" name="kmod-mlnx-ofa-debug" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="bc76d7a960584a38cf9cd5b0da170daa8d8351041135e741391250b79fad3741" name="kmod-mlnx-ofa-devel" arch="x86_64">
  <version epoch="0" ver="25.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-9" date="1742472000">- Fix requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-8" date="1742299200">- Switch weak dependency to boolean dependency</changelog>
</package>
<package pkgid="1b30ad9fdb1a895cb6e041df58213f8cf2790afbbfffe776cc5975fad660da5f" name="kmod-mlnx-ofa-devel" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="15df4c6c220c6ebbb866cc910b36298e6c6a0344df7081b3f518b340e073e498" name="kmod-mlnx-ofa-devel" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="31daa48a426073d0b70cf1ccdc8b06b0e344f345f2a2fb8101d27103b2afbc3f" name="kmod-mlnx-ofa-rt" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="7cb288632fc41a7b0a2576d6b5e709fe5adc21ace1b4dbec91d0682be9b72f4c" name="kmod-mlnx-ofa-rt" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="323c602b4052335c11fa1fcc8af929067eb0a3305b49fd14ebcbc8edab1811cb" name="kmod-mlnx-ofa-rt-debug" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="169f7a05daab5cdf6cfe154f0a28ab8005b48d01d5c36c7111baaafdc1e0e5a8" name="kmod-mlnx-ofa-rt-debug" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="818f691ba91bf0fa859bbd2da783c74f1b150fd2246d8936bf40587326e44b64" name="kmod-mlnx-ofa-source" arch="x86_64">
  <version epoch="0" ver="25.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-9" date="1742472000">- Fix requirements</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-8" date="1742299200">- Switch weak dependency to boolean dependency</changelog>
</package>
<package pkgid="617b2792bbe53094e580f6576baa74872dac40cd5f17d21d0d8a216aee792194" name="kmod-mlnx-ofa-source" arch="x86_64">
  <version epoch="0" ver="25.10" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816001">- Ensure correct sign-file macro is used in Rocky 10</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-13" date="1749816000">- Ensure sign-file workaround only applies to Rocky &lt; 10</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-12" date="1749124800">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-11" date="1744632000">- Bump to rebuild against new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-10" date="1742817600">- Work around broken weak-updates when obsoleting legacy kmods</changelog>
</package>
<package pkgid="d85526228af05e047462e7f3322d52e9cb5694555b5246a6c4b930473912b8fe" name="kmod-mlnx-ofa-source" arch="x86_64">
  <version epoch="0" ver="26.04" rel="1.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 26.04-1" date="1781697600">- Update to 26.04 (DOCA 3.4.0)
- Remove 0375-BACKPORT-fix-tls-resync-async-api-change.patch (now handled upstream)
- Add patch to fix dpll ffo_get API change in kernel 6.12+</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 25.10-5" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-4" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-3" date="1770811200">- Bump release for new kernel
- Add patch to handle struct changes in 6.12.63</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-2" date="1763985600">- Fix Requires for kmod-nvidia-dc-peermem since it's not available for RT kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.10-1" date="1763726400">- Update to 25.10 (DOCA 3.2.0)
- Add support for all the different kernel variants</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.07-1" date="1756814400">- Update to 25.07 (DOCA 3.1.0)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-16" date="1754568000">- Ensure initramfs is rebuilt when installing kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 25.01-15" date="1750420800">- Bump for rebuild against new CLK kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-14" date="1749816000">- Ensure correct sign-file macro is used in Rocky 10</changelog>
</package>
<package pkgid="203cf5602e11c5cb852e23511228f420e617e20754049abcb6e7b1da4b8abff1" name="kmod-mlnx-xpmem" arch="x86_64">
  <version epoch="0" ver="2.7.4" rel="8.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="24584579fdce0e7717f157d3c0826d9dc1fcecc3b186728f8ffccaeb293b60ca" name="kmod-mlnx-xpmem" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="2c2f3ea622da5040ea4e39c3cbc60809f582895cf2ff81416940153d62a032d4" name="kmod-mlnx-xpmem" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 2510.0.16-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="3ac5e850d285f3e4e20a9d27ada6020683221580c88a4fd876e04238270ed0ba" name="kmod-mlnx-xpmem-base" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="cede591618f4e5ebabf12b90ef877502f7d33dc9af97bea25503fa3ef55d3f65" name="kmod-mlnx-xpmem-base" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 2510.0.16-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="2f9ec48089d524ca53088205b69c6259b2a22dc229f83c9822019c6f65e5d019" name="kmod-mlnx-xpmem-common" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="fd7d16800a5260b1426bfc4f1a1b538c6eaa29327c8805b4d2a9b18469fc5227" name="kmod-mlnx-xpmem-common" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 2510.0.16-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="4cb9d86646a33d348d8ee681e70501ec6e7a7faee44bd18da067f80b914f16b5" name="kmod-mlnx-xpmem-debug" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="22ea7fd17e1da2185ef33c6a8e05a3d5ddf3f85da001ee80495246fa0c814c55" name="kmod-mlnx-xpmem-debug" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 2510.0.16-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="21cf928c21e76063ae0bc198a729fd8efa0f43357ea47832ec91815b35abe6f1" name="kmod-mlnx-xpmem-rt" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="5d764051eb33a04c8291758b3265c0bb45d772f8442023cc197be352d409db74" name="kmod-mlnx-xpmem-rt" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 2510.0.16-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="b43abd3de4de983475d5c890dab56ac9208beb92a0bf9a588aec2a4db043089d" name="kmod-mlnx-xpmem-rt-debug" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-3" date="1741780800">- Add SecureBoot config</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-2" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="d684673f5426e9656397e0c3eff692149ed95abce4c822e5a25f716b39e1e1d4" name="kmod-mlnx-xpmem-rt-debug" arch="x86_64">
  <version epoch="0" ver="2510.0.16" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 2510.0.16-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-2" date="1770811200">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.16-1" date="1763726400">- Update for new Mellanox release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-9" date="1763121600">- Add support for all the different kernel variants
- Add metapackage to ensure the correct kmod variant is installed for any
  installed kernel variant</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-8" date="1754568000">- Ensure initramfs is rebuilt when installing kmod</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-7" date="1750420800">- Bump for CLK kernel rebuild</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-6" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 2.7.4-5" date="1749470400">- Add sign-file workaround to enable secureboot signing for newer kernels</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2.7.4-4" date="1741953600">- Fix SecureBoot macro</changelog>
</package>
<package pkgid="648d849c7fc202d27c96dc7623e3f507d20c3ecb5961e5a83903c43b7b363f38" name="kmod-nvidia-dc-open570" arch="x86_64">
  <version epoch="0" ver="570.172.08" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-1" date="1749729600">- Update to 570.148.08</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.133.20-4" date="1749470400">- Bump for rebuild against CIQ-kernel 6.12.15 kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.133.20-3" date="1749124800">- Add sign-file workaround when building against CIQ kernel, pending openssl engines patch in sign-file</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.133.20-2" date="1746100801">- Clean up conflicts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.133.20-1" date="1746100800">- Update to 570.133.20</changelog>
</package>
<package pkgid="6d5e0cbc99526fdb86145ccb9e849fbb5d82a546658deb63c26555e7c675bb65" name="kmod-nvidia-dc-open570" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-1" date="1749729600">- Update to 570.148.08</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.133.20-4" date="1749470400">- Bump for rebuild against CIQ-kernel 6.12.15 kmod-mlnx-ofa</changelog>
</package>
<package pkgid="df382b5caed530d1f21adbc1b63d0801a514f244d6d02fc97a46e730780b558e" name="kmod-nvidia-dc-open570" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="3.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
</package>
<package pkgid="0d91efa7289e4f9c823f201e5ba30f3577ac653f46412c83bbccfcc6bf623ad1" name="kmod-nvidia-dc-open570" arch="x86_64">
  <version epoch="0" ver="570.211.01" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 570.211.01-1" date="1768392000">- Update to 570.211.01</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
</package>
<package pkgid="974a810ee1ac42f5314193fd6107d14821a6a89a6324071970af0521641c78f5" name="kmod-nvidia-dc-open570-base" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="3.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
</package>
<package pkgid="fe2ec25d85b7472754c0bdb4c7273d0377c45f552fa41bd0bc6124c4ea8f8797" name="kmod-nvidia-dc-open570-base" arch="x86_64">
  <version epoch="0" ver="570.211.01" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 570.211.01-1" date="1768392000">- Update to 570.211.01</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
</package>
<package pkgid="41a3145bf49d5fe0b1efaf9be9999159e8be531cd1079621426ae68451a5a738" name="kmod-nvidia-dc-open570-debug" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="3.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
</package>
<package pkgid="eb3f35f77f46e66bbb17c715c6327d4ff4875134f2083a6d0206ee9375f4e06b" name="kmod-nvidia-dc-open570-debug" arch="x86_64">
  <version epoch="0" ver="570.211.01" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 570.211.01-1" date="1768392000">- Update to 570.211.01</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
</package>
<package pkgid="f2a40119f764312460cabd8b0e62ab034402f5327204dc77e3f158e8c0cc7da3" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.65.06" rel="3.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="a41b255a25ea1987d3766546e4eff820c7fa958a3d1e9f9891b4bba84f2260a4" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="e7e09d4973b884baa3216268e6f82f9fa4bb7ae893626db43e47b4b1d796ea00" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="6ebc156da819af82445d4b2295b2cf512bdd5c484204d7545d07d6594ecc6ac4" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="0f6c6446b733890d79976ac01ffd01b03d48dcce7e4a4a4fb55b39212c30c87c" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="26b61e9e58dcf4d8c78971bf0799b614b130e793e6997ced6b5dc22bc89ca480" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="019e2dde6e8d38a3749013247bdff505aa3baea71904511ee9748dbdf9f6be3a" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="b870ada5dbc77be545dcda61f23d3d3a86bf2c2a75d9b33db4ed06cb613c6a6f" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.126.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
</package>
<package pkgid="28d7af0ea41fa7d3336c070871d0d96f0b74cee4f109e113f1f8f38e2e5b1a3d" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
</package>
<package pkgid="a779543f25d90765551c7b34919988db74fa6433ac73c0047c1853a5158571ad" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
</package>
<package pkgid="fabd92a23dfda4780788e6b100e7191c0508abe4a297aa1229cf3451d7631a99" name="kmod-nvidia-dc-open580" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.159.03-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
</package>
<package pkgid="4cd1856921ea039e7ea17175f4328ff4c81bc403ab5b364e5e26a3c4b2656b03" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="c27620daedecb05079096d92c6102048671da953ffe5bbded1ae0837576435ac" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="0903f87b15a36ca11eb05c90fa38b1a5cc48100e2f8a5c1ec7e2924dbffe632a" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="6b33b53cd80525f02d5e7115fd0931faebdc65cffe4b68c03a3b712cf3024601" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.126.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
</package>
<package pkgid="b3a922212780eb588bf8d29d02a009f373402fb7ccef767dce8162927810a6c6" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
</package>
<package pkgid="decf551fe72d3905051d5e548c79785b13eba98bdaddfcd2d3f89cf5d9ccf209" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
</package>
<package pkgid="e98a1e4b394642ba764c389ad552b36a03f1b75bed6914401f7b5534280cf30f" name="kmod-nvidia-dc-open580-base" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.159.03-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
</package>
<package pkgid="c0950c873851bbeee7074fa7ab9f4563ed0b1ae2f48d278694ca20a887b48031" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="4305621badc8f878973a50015e8ae11c9d292448092378a9d20218ea4b904503" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="0b504d91a5f5ee2372de680c71b5de3626b42e43830cac220ea150575dfcd6e5" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="bf8f82e779fcb598c7bd3d811189ac5be48233615db3df48cd0d5c388ac3c4c1" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
</package>
<package pkgid="4c2efdbfc2fd5a242b91fb03860efca3733bce1fa567d0ce1524931c59dc5233" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
</package>
<package pkgid="94406790dafe730b327e1caeb19f7f83720ea33b1f76da1a212cf04f42fcd151" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
</package>
<package pkgid="a6c00d06bfb4b562085a1ea2dc75920cf521be19705e82f43f945a48c307201f" name="kmod-nvidia-dc-open580-debug" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.159.03-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
</package>
<package pkgid="e902ceaa1da1c9059f54276f861500f2b6bdd9ab495593460244b48b51364976" name="kmod-nvidia-dc-open590" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="f88bda57df4b2a62ee35d60ce51e662fefc963d8d6d049092cc72d563449adf0" name="kmod-nvidia-dc-open590" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="1ccd90c312e09c69bf22ddae09288fb4c8bd832fbf045317740110547a7f686f" name="kmod-nvidia-dc-open590" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1770811200">- Bump for kernel rebuild</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="d3710de9bb312a38f2b221df882dd02884b4ac1effc663d0b88a325ae4c77c0e" name="kmod-nvidia-dc-open590-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="6adbe2e4890416408858bd5a3e05490986ba285186777f971dbfcbbd796eb18e" name="kmod-nvidia-dc-open590-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="64c4c6f23311a081fb7747272b3ae7b70bc1023a0c9c43d811b749e7dceaa007" name="kmod-nvidia-dc-open590-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1770811200">- Bump for kernel rebuild</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="d712d2e0055f3a1dbebbc24f064501905ff3867c324ce40defabb2011dccf372" name="kmod-nvidia-dc-open590-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="f83e9d06a55f596e24b6a37066ea49ca3f43930bd6a1a24e151c883e9c08626b" name="kmod-nvidia-dc-open590-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="175c09afc9dc3f6dd5389721a422c71d449a1829a6e20c6d254bdbc14712d568" name="kmod-nvidia-dc-open590-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1770811200">- Bump for kernel rebuild</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="9427615945fea4b55c9d7f94e30d69c878a71d9aba4916f874a2e24138c61ce1" name="kmod-nvidia-dc-open595" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="9c821d24fc2defdaa2065c9a99ed88570d9ea0ed56fb6563251cf945fb40491e" name="kmod-nvidia-dc-open595" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="a7a07784282eb5e95f1594222c922cca29a0ac05f45e370e63e8b3849cbd7576" name="kmod-nvidia-dc-open595" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="57aee0a63530d6ad6aedcc6af5b9cb09b962d60af9d3fb7694a1829a90665420" name="kmod-nvidia-dc-open595-base" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="a843a91ac49b7051cd0675bc4b7fb4614beea008fdd849f43a7f5780468b9ac3" name="kmod-nvidia-dc-open595-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="f875952d3a98d778c7144fbe31169c130282d474603323da57a7ededfec96951" name="kmod-nvidia-dc-open595-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="d40643c73c74b26906a981affd51c1c6ac7d1c44c3e0fde158d9ce7b1abf9e50" name="kmod-nvidia-dc-open595-debug" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="612cd87421d042744005a4ecfd33ca2a5e5d33dd4f6bb9cfd1a3825a1ffc0053" name="kmod-nvidia-dc-open595-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="34b73013c50b7290f5a83fdf3a243d4271c2ab3423a1fd644af2d2bd125d2d08" name="kmod-nvidia-dc-open595-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="5224ec8587dd81d00696e19ceeb776683f195cc006462a448e99674065f1d85c" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="9395d6f07b2e8d7079d4079e574e51b1aa04af7d0559958e7737a8ba607642e3" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="045c9c9409918aaaec5963d856c3a850b15374d5b152ab441b1c952fce0e9fa5" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="9503289e48f43987e4dda4fab3c079744e349afb1f64b7db3b6c644c5bbb15a5" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="1994a820e733e831d1ca10ae9c6023c84dc737949e955d19d09233790085e63c" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="27a9fe5bef14eeb96f853926996abe7900c6fd56dea673cd1ff6310a69bf9341" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="24d87adca630357dfa7ba33d0a1eb326c8f20645fe5aeee80b8c488f574de13e" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="bbef62f4da829ad67a381ba3cce548e24b3568b4864f9ab7da3a3f8a568ae37f" name="kmod-nvidia-dc-open-latest" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="4125937c35841c1892c4d8d307c52d77a0e2fe9a13ac04cbdfebdc597d0dc540" name="kmod-nvidia-dc-open-latest-base" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="4287198cb2d187fe58f3fd5e729ef69c8355a13054eef2c294e1dff508fed7b4" name="kmod-nvidia-dc-open-latest-base" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="876b9180148239da0a81dce88b630acd7631eb1310906927922c204bad6ccd00" name="kmod-nvidia-dc-open-latest-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="69ddc472fba9e11bd6abfc9206e71b9416ebd439f27d92665e33b759ffc630ea" name="kmod-nvidia-dc-open-latest-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="ebf022221e2d51ce3ecc7d8017742ebba4c5faf6bcbb53cceb946d7000365fa1" name="kmod-nvidia-dc-open-latest-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="3898a969d9c54def2a60240c6d4109ddb0fa08ac069dbafad382e9d03daadf02" name="kmod-nvidia-dc-open-latest-debug" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="8438398cff57ea2fa19a024d6e301aaea577de8fddb5814de7da97a1ad05d115" name="kmod-nvidia-dc-open-latest-debug" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="1386e62af8afc95db9702902115731cd018bedbcd67468cab331175f64348be8" name="kmod-nvidia-dc-open-latest-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="0a462c2224890518996f39bcd6bc89d27261fa97373a703e41640754ee105c8d" name="kmod-nvidia-dc-open-latest-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="58e1c7532c318eb9d008dde1607ef55119ec6419e9f7cb06570ace310121f722" name="kmod-nvidia-dc-open-latest-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="4e8a51090c9de235e448aa1fad3d6a9e3469fc3b308fabf76f5e3b8ff4bae729" name="kmod-nvidia-dc-open-peermem570" arch="x86_64">
  <version epoch="0" ver="570.172.08" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-1" date="1749729600">- Update to 570.148.08</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.133.20-4" date="1749470400">- Bump for rebuild against CIQ-kernel 6.12.15 kmod-mlnx-ofa</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.133.20-3" date="1749124800">- Add sign-file workaround when building against CIQ kernel, pending openssl engines patch in sign-file</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.133.20-2" date="1746100801">- Clean up conflicts</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.133.20-1" date="1746100800">- Update to 570.133.20</changelog>
</package>
<package pkgid="d591c01d94175956bc039eb78fb3e4654cd7baf3af308c427865730d4a65275b" name="kmod-nvidia-dc-open-peermem570" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-1" date="1749729600">- Update to 570.148.08</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.133.20-4" date="1749470400">- Bump for rebuild against CIQ-kernel 6.12.15 kmod-mlnx-ofa</changelog>
</package>
<package pkgid="50e35d816eab1b263076e1f9570befc6c2cf927531e2223672db36e60fce8b1c" name="kmod-nvidia-dc-open-peermem570" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="3.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
</package>
<package pkgid="9efb4e309a8063342885e6375dcf047e6c4acf60926d96d0ef511fb8b7385f6a" name="kmod-nvidia-dc-open-peermem570" arch="x86_64">
  <version epoch="0" ver="570.211.01" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 570.211.01-1" date="1768392000">- Update to 570.211.01</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
</package>
<package pkgid="e49d82cd08a233801ad0c2e5f9e16c88bf7c81206c0ab834ee9d0af6c4ef3fde" name="kmod-nvidia-dc-open-peermem570-base" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="3.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
</package>
<package pkgid="8ac7f7b8c0fd4d8c35ac59e477fc2146aaec7c1000cc7f6c2ca4ee091b3b6903" name="kmod-nvidia-dc-open-peermem570-base" arch="x86_64">
  <version epoch="0" ver="570.211.01" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 570.211.01-1" date="1768392000">- Update to 570.211.01</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
</package>
<package pkgid="2315798d2d4f0a4d13138ebf00315dc04efafd7844ddd66203e1b55a8c5fa4c9" name="kmod-nvidia-dc-open-peermem570-debug" arch="x86_64">
  <version epoch="0" ver="570.195.03" rel="3.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.148.08-2" date="1749816000">- Ensure sign-file workaround is only applied to Rocky &lt; 10
- Remove unused python generators</changelog>
</package>
<package pkgid="a37f7e35bca3d26a3a7c0b7b352574c803c58db1f32f618f528540f1abd6633d" name="kmod-nvidia-dc-open-peermem570-debug" arch="x86_64">
  <version epoch="0" ver="570.211.01" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 570.211.01-1" date="1768392000">- Update to 570.211.01</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-3" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-2" date="1760356800">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.195.03-1" date="1759320000">- Update to 570.195.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-4" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-3" date="1757332800">- 570 is no longer the "latest" stable driver, so remove that designation</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.172.08-1" date="1753099200">- Update to 570.172.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 570.158.01-1" date="1750766400">- Update to 570.158.01</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 570.148.08-3" date="1750420800">- Bump for rebuild: CIQ-kernel 6.12.30</changelog>
</package>
<package pkgid="e0ee77668127fa48346dce7a4aa20a343d42af2e264a17917495573ee9d68dd0" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.65.06" rel="3.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="f835bc2b00a5bf069a2245ea1b12ea29cf59664672d2dac0fd32ae38ec7ad8bf" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="fdc9ecb72f2dac420f19052b73268ba58bd24fff6595b6526ba6cabed06d6846" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="78336a87a73241baf579777b5b7bdf9a223830dc8117a823c4e457074daf3065" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="9895a4a4df87696471b9ed385f28ea17f4844dc79af73a9f9ccc5476eef7d738" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="61143520594aabaff657753c581242774211968e7f869ae68ec1e17c0843b091" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="191dd69872e03dc6bd93c7f11c3f96f5451f8fe5dd15304633f55f86265b5f96" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="238fcccd9b7fa9b5ef3542fb9a1b105a407d8b8045fe54623c4c145c4f185a2f" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.126.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
</package>
<package pkgid="e855862b6af291493efb0c4693119426f300089749ce99d325e9806e07f258bc" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
</package>
<package pkgid="06e5b529a2ded7ae3cea9835af5f94945d53e2af4bac77f4db799eeed117a984" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
</package>
<package pkgid="ab0f15a34c3fdcf111cfd6588eb38e0bd92b04e69b1c5954612236ba72a5f90d" name="kmod-nvidia-dc-open-peermem580" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.159.03-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
</package>
<package pkgid="2df70a56b36749090ead521ca22d4e73973fafdb663ca0f7dc85ab1a53261edc" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="f1953a4a9e75ec859e0b7f294439af964237d7a468ea24644f9826165199e6c6" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="3f16a87d906171cd7c913de1dd0c3b0fbd0cc8cbd5f0b6cb5285d349d2851ca8" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="5eee0ed998becd21457eb282a4cb3a0c37f074d3a069ac2b45305ad43b7c2517" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.126.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
</package>
<package pkgid="682fa18e5479bef0f3435c55009082ebdc4e96305c2c7a37b8d3e7b37e5e6d82" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
</package>
<package pkgid="c551d635f5e9227bfa94dae835c87825ea1ec16cd66380bdfe47031fffdbfff2" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
</package>
<package pkgid="83172f71519bbc553b5b13ed96fd616cd021ac4adc973031b1f6961911952e2a" name="kmod-nvidia-dc-open-peermem580-base" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.159.03-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
</package>
<package pkgid="808880515b2eced45cdccc6443e349f66bb3e083390bae35bd428f608cb2d641" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="24bddc300234b8148213cc61c063b5dcbbc2cec9f3f32e0368befd244261328d" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="651ef96f17b30f09b395023c0461a0c4386fa21824fc6773c3a2750bf5495ca1" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="c26971e6e93320b05f7bc852dd028094c997bb98bc68a143b5bf5128bc695782" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.16" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
</package>
<package pkgid="a790b3f70425a88b3ce3a97f535776f8cd82a6f778f3942d2da397c22ae3fced" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.126.20" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
</package>
<package pkgid="6f4ef7f25890ced8eab35470746dd3cf9cea167ab55c96d64b250ede01643db0" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
</package>
<package pkgid="c3116f8d51024d9cf6e6bae36c3e86aaad1e60e2f31feb084897af965df51fd2" name="kmod-nvidia-dc-open-peermem580-debug" arch="x86_64">
  <version epoch="0" ver="580.159.03" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.159.03-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.159.03-1" date="1778068800">- Update to 580.159.03</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-2" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.20-1" date="1772020800">- Update to 580.126.20</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.126.16-1" date="1770811200">- Update to 580.126.16</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 580.126.09-2" date="1769688000">- Mark as not latest</changelog>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
</package>
<package pkgid="9aaa3d60b2649aa3544704a082ee6f9f98dee7d4a012650de88cd554539af332" name="kmod-nvidia-dc-open-peermem590" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="d8727d460f9263a1a30a53ee254cbd4353f6a5c1bc535285a00f2e47b0d5a39c" name="kmod-nvidia-dc-open-peermem590" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="4d047eaddc88790c9d80e9e4f0aa2e52065acdc97335bd8cd9df5e624a7b1c1d" name="kmod-nvidia-dc-open-peermem590" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1770811200">- Bump for kernel rebuild</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="5cf591c88f8efd843b975cb2a315657cab4ef982ac1c88564a23a34f0e032267" name="kmod-nvidia-dc-open-peermem590-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="22079b1a4d7369fa450198c80e6b9725fcb52931e5aeb28920089f6330c970e9" name="kmod-nvidia-dc-open-peermem590-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="08e65980afa9a1c222e27b3b5128e726ae08e02651aa769397f656942a5c3b70" name="kmod-nvidia-dc-open-peermem590-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1770811200">- Bump for kernel rebuild</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="647d073e6746cc312b96f3af99c98002126de014473dd914a79fa7b204ddbf45" name="kmod-nvidia-dc-open-peermem590-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="c3710835a0f5c94cb469a3d0692f98f00c54a92ef11bab467e42582d4df854a1" name="kmod-nvidia-dc-open-peermem590-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="6223d6afc49d1c50bfdf5e10af9b16d48ce599d495b684ab8c49b308afd8cda3" name="kmod-nvidia-dc-open-peermem590-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="4.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-4" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1773230400">- Bump release for new kernel</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-3" date="1770811200">- Bump for kernel rebuild</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="9044640c3747e8414d83a4d94ae47dea72bb34df8a40eaa075c86d8241353cea" name="kmod-nvidia-dc-open-peermem595" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="78bbdcd9c37cbae4e7cfdee6a4cba27757886b69b9ac36b308eb02d89df51514" name="kmod-nvidia-dc-open-peermem595" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="ca4383c3fa91fe383b62ea39b8cace11a21c37a74f0552307c3ca9f121a060c1" name="kmod-nvidia-dc-open-peermem595" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="dc9a6dfe6c17749f3897970779b3588dd5d5ab9c5170333f75ebcb7ea678bb1c" name="kmod-nvidia-dc-open-peermem595-base" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="092d2d015bf2d676555bc6dfe4320df6861f0e54e8893429c9e28da7cbb4e970" name="kmod-nvidia-dc-open-peermem595-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="efac9a1ca6aefa399b7435ed2635e073ee93671545d307d76fa06305646f17a9" name="kmod-nvidia-dc-open-peermem595-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="92637f859fb4092a8233753250da7d89bf00d28407d6150b40c60afc4806927e" name="kmod-nvidia-dc-open-peermem595-debug" arch="x86_64">
  <version epoch="0" ver="595.58.03" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="5deb2fbb850fb9624b986b2b0451e1dbbe28b319d0bc6dd49bd3b90db6f2e381" name="kmod-nvidia-dc-open-peermem595-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="d42cb59e57e234e7f53f5bcaacd2d92d0526351ab701a6486e60cf941d691724" name="kmod-nvidia-dc-open-peermem595-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="fc62d813a2df0741d2cbc187a86e011b825f44e20134cdbe396955536258bead" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="d057fc14aa52d253d7b53292704ecaeda31f5586c228412950732bf60e25afba" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="580.82.07" rel="2.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="82fc4c84031bfbbc241ce45d58e14612662971d04e53f133dc129d744e90e404" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="580.95.05" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="bc381d03cd3f050b69e422c964a15c42a9673558e8730a6c87db2621b0f9195c" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="5525f01ce0286e9ce0df60f51cdf1d385c55a2a9d91835f6608b114a91f534f3" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="d5a0e0eae946f8e8ea04d6fb637a450150c29d4550c8ac0a64315c6b605ceb8f" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="d0ce5ee1155544b682a7d9da7281a0d7b42260ec6b1e4b697e95d3d6b20cee3f" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="7ad53356b5d915a1feb460e64ffb241383599954fabf15c1636aec80a3ef1088" name="kmod-nvidia-dc-open-peermem-latest" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="ab3ce61ef602edb9478b51082a8ec8ab19b15263e58547a550e927501f0f3367" name="kmod-nvidia-dc-open-peermem-latest-base" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="37b17777963421c018d8e3c517b6a8267a54fc6afe4b66331199e8dbea7c5061" name="kmod-nvidia-dc-open-peermem-latest-base" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="9c4cd46a989d8cd67367ca72fd03df552598122304c2a0a464101b9fe125a5bf" name="kmod-nvidia-dc-open-peermem-latest-base" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="d0c56de08c108367d06e1664f58d35d3b129326d1ce8848dbcc3171862953c52" name="kmod-nvidia-dc-open-peermem-latest-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="f9ee11a595ec79b31fd4c4ddc6e1052ff72846b3d9464ce6d1d21a4c72e74503" name="kmod-nvidia-dc-open-peermem-latest-base" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="8cc02666c5ba281e9fd9e88c18087fd3c90f82983293431f66fae1dad31f9eba" name="kmod-nvidia-dc-open-peermem-latest-debug" arch="x86_64">
  <version epoch="0" ver="580.105.08" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="557a2dec2a49afea39dbdf60b4b9b88fa4c6773a7fbbc3e4b681f6036e1ac3a6" name="kmod-nvidia-dc-open-peermem-latest-debug" arch="x86_64">
  <version epoch="0" ver="580.126.09" rel="1.el10_1_ciq"/>
  <changelog author="Pratham Patel &lt;ppatel@ciq.com&gt; - 580.126.09-1" date="1768564800">- Update to 580.126.09</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.105.08-1" date="1763985600">- Update to 580.105.08</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-2" date="1763035200">- Add support for all the kernel variants except rt* (since NVIDIA doesn't
  support realtime kernels)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.95.05-1" date="1759838400">- Update to 580.95.05</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-2" date="1759147200">- Bump for rebuild after Rocky kernels changed kABI for certain DRM symbols</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.82.07-1" date="1757073600">- Update to 580.82.07
- Mark as latest release</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-3" date="1756468800">- Until this has been more thoroughly tested, don't mark this as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-2" date="1754568000">- Ensure all nvidia kmods are excluded from initramfs</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 580.65.06-1" date="1754395200">- Initial 580 release</changelog>
</package>
<package pkgid="51aa6aabde4d461e70f12350cfba73390937aec97c2ae125859eadcdfdb1301a" name="kmod-nvidia-dc-open-peermem-latest-debug" arch="x86_64">
  <version epoch="0" ver="590.48.01" rel="2.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 590.48.01-2" date="1769688000">- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 590.48.01-1" date="1767614400">- Initial 590 release</changelog>
</package>
<package pkgid="9b28f232111341eb32d91dcee9130143550b1b3f035dc32d0a08f268537a3341" name="kmod-nvidia-dc-open-peermem-latest-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="1.el10_1_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="f99b9a4693042a389aae787cf1b89a4515875833b6503dbc1a6c4d53faa7a2a3" name="kmod-nvidia-dc-open-peermem-latest-debug" arch="x86_64">
  <version epoch="0" ver="595.71.05" rel="2.el10_2_ciq"/>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-2" date="1780920000">- Bump release for new kernel</changelog>
  <changelog author="David Gomez &lt;dgomez@ciq.com&gt; - 595.71.05-1" date="1778068800">- Update to 595.71.05
- Mark as latest</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 595.58.03-1" date="1774440000">- Initial 595 release</changelog>
</package>
<package pkgid="29429a21904713c002fb040b724b03931f7dd7b7a1e661c2ca03f6068bc6ba41" name="libibumad" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="bcc79fa3687f2fb10e5b4213b6b85cd2f26f4af605f52f8a0132175997f8cc17" name="libibumad" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="07eb6ca7dd738eb76b7e5cc788be63b6bc64866bdb498ce2da28c22a105403cf" name="libibumad" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="e7f1d54db583b4e4a6929c28b8fc8b8b4aae0920b815e414cac3e2f2d20a65dc" name="libibumad" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="3f322080e656afd11665a9264b06ad68feb009c3c7fe8c2301df7d5dcc00a56c" name="libibumad" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="760c6035e77d84836a01969a46655da132ac4c2943a1a7025bc64fd66adbf4d9" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="6cfc81e6986b14054212e493c7142644a002053b0c0bf777dea9c1fc9a47fe58" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="30282508c5a2427b1370147cdf647cef58ac0c811b18fafc03b4c98bee896a8d" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="d934d725d15e4950cb8887c35bf8a742fd139a80d9a38ced7af67cb01ac12789" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="317b6e787e0e697191a8c57940e8fcebd1a846d4686c6cd1fb5b5a8585266aea" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="b77b45a3050f489f754e795e520eaf4bd6db00c6cf6362b2fb2c179de90b1098" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="0278be41a236ef347b5d75c542c5e7769cf17ab8cb082cfe2ebcbc846a11c048" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="fab19ebffc48a1453a93c09b58d10882997bb7a24bb6ef20350698f21e7dfd64" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="409cb500da3f5d73f39692b01dde24f3c9331231d423363d3c80ca6a2c44c5da" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="5cbddae5ba93726740b44a311c719f8b3c326bfb8879a0920d3d1f920ca0377e" name="libibverbs-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="7e9b5cf00e14a7834213bd09a10b33e791f00da77be96de8a28027f8144fa411" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="f28a467f8e81ef45b02d9cdb1ef0ac26c61b1a4fc6d36caa051a13fdced30788" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="f5aebcee0c34db5592ea74f225fc1bdf2df881205b258744abdc93f633e2d65a" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="85dd87794be299bf385e3580bc531e1e53d9dd7bbaed4d7e472b616ad19be05a" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="23e14cee1bc6e372bdfc89ddb0200ece9c5390aed90c8aa2ad1ff799901dbd80" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="4ea1f12320d67c4203c5d3f2f106d4cd7e2d188acaaa8538e2e3c90a9c6a66f0" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="72c7e2e70a2d7c3f29d814a341c32f9a703ab236d57ffbe7be93c3fd96dc153c" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="0d68b688b7a2ee199208936e88a87576ebae0bdebb0bdec70fcd2b432e9f0fc8" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="495346321d552f80992b6c26149cc69eaa2d7eb24826473e2a8a03ff8dbf4c87" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="df0820280088e163afdcd68fa97f03648947c558161c897748a025ca97b48bd3" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="ccf28dcace6931fe725877486653b31e62dc9a9e2e23a55f97bfe55d0f715865" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="087d64a05fd148d454b6966eaef059b517dd764ebe78aea660bd3c70414b0dc6" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="d7806477b10f9de2ad366f8e39c5b1018a057be8184b5a4dcaab82d62cad7e98" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="336044b89a784f76ef0172bc48fc3f4e8c08771cafdc2eddc5f938d40c6433a9" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="474c793c5c3a9e34d97074aa7d6d72f5e1bea93585cdab1a203198e31b6bbaa7" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="de6e03d8cb50b1cdd1549603e7ce8959730858b6ee4a90c2e932d4569a5c8a0c" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="83479f2f6d505e89fa1ff79b38f2ce62db53e41911f93979d30d278363909ed8" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="7d6791f6c6b5bcfead06f9c766d7e80a97802af513fcd28c44d435967144dd58" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="fad36a35d16b17637b460245a56afc166edb8cf77b7a44cc45ef788679753938" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="322f337619a78d19fb531171d79337cb235ea0533d9e3892b85f2abf4666cd8d" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="0fd828f67d3766d86045d06347f5dfbf466cf023f0df165bfa0b7dce4503dc3e" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="92ebdcd2ee4fdd48f9f6456ce08a37600789904a2f3ab2d2eb01137612b1c128" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="701211e73113df5015e5c7e28068b2c19b53925c147a1b2434892348e7180c24" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="3f00fa4617d95857b112d1b7c3e308c3256d55e40e328007f471a995789682df" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="81d39be833be440a2dbf66379f70d37f29560b31c0836bcdc9c2dbb36709279f" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="db516e0e9d984b846e708f6c76dc1073dfafb23adeb35be806e7a6760067e908" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="7402a806f6e9a897ba28c4b17d3b0aafee01b2a91c68873cc88f0e0d2c85dabe" name="libperf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="e6441c584a911e218d91659447f83f1faf655b0a34fba6666338ecf093bf7199" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="cf29ee8756d8fcd47bcf2aa3a579daba010634c56d5b08c9904c5e57d654bb3e" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="bdef42bb32d56661c86f557d0f1c6a29b23095c7012c620d9a8f648a0942f858" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="b232859515358b7700c3373e110e59653f32ae532e4d7957f50109710341ad4a" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="12290824e6e0caab7d21b8a61b6f74c7e82fa8935f5f016d6713fcc3eb7de105" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="a92879d91bff819c367327ea91806828e30cf8b00bc06e099d7208e8f442441b" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="2f5affd0378ab5d7a355afd76c75e8f51797647b6481b378a459e415f17d14de" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="26d544226467149b201168c4f83d5635823e78fc178f5faa486e7bf559480a5c" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="1b1f31b17392036d0464f4e130ef0f3bd7215df841df0c5284aa52c05cb01153" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="7b986322c4a25b1afbf508770852fd1abe991095a9fb1dad410ac7d9feb23e93" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="71a35866d9e00d3b679c1d3122ee2b95b2925bcfe90554c7bc5f832d24b2a058" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="42845352e4c2e3a6ed68b56e0e21c6015008a4e2e55cda117603cb70069e83d1" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="4f02f19a7357de1928dc631e221393bf93256705d8bdd22dd7d463299a2cfaf2" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="c97a7ce168311e95e49396b9c6ed4801e19f2ae28f6feef92db08ba7d901fb95" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="956df5103f5b02aaae4556fbd652da90c529059ca0a07d6c76190d4b78f4f1d9" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="360c4530e633db56749f11b6e62bb949359b5e6fa033a6da05fbbce36590bf7c" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="dc9f920d99d28fb94f3818d3361c97f9996ca2861db052789efddf23640a0786" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="6343478c3b33b26aa2ed23e8e2b9621fccd63e242ce52cc193f9705f074d05ae" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="1e03d371034a8d976cbd695e3b3b92596937b7a696286a8b6049a97d3816f8d2" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="334c359e3e0d41229747055d6e76a2ffbb59e3ea480118e9dba4a213e4e72345" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="17a548cbd046b102597068f63c1bf3d9768c852820beba18204cace4a6372b83" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="666c43d6d5d0d3f8e46b41daac66a80643275fca5e370aa070d9d716087213db" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="af3f47eb8c2423020d4f66f33281a664efcfa6710b10a4a2f765e2005594f332" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="d392d368a05bf607bf0f8ec13af82598d007430995b0ba304a6aa1448dc25054" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="122fc810421e482951ded0e29ebc6b91409a82573cd64baccd06908a826a503e" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="eda863579c8f1885ed5e51fa2a896a22da1a90b47d2bbd400913f63934dc31a8" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="785856f1f8d18bef2c0fcf10afae5e3b28dcdb633256d84a29967e263ee621a9" name="libperf-devel" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="f1268e14c83d04c4a06f5b318a122e2cc607b1ad2fd75933d44a79ee5727fe9d" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="d43939a64e713599f8812345853943b6d32903585b95f8610079d0af2901b730" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="e984c1e1ef9b921dff4b8028bcd2d8e5d425bdca976de67824d9ed75219d3993" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="244ae79a3c1410efefb951f5e764d6da2ee55f0f80d215423da59c78cc134b01" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="d0865e89e8355568346d1ee2c827a789788c339fe8a0cccb7a56af9815f17349" name="librdmacm" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="42f9c2efb46a27339a4c2cac699967bff0e9d5d5c28b6f346e6fb749cd8943f0" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="3033f059747ebeeafbc42f06713c8769102ba8e798756f06724841ce373c0f0d" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="16d6aa8e4fe63fe3c80252f14f9b24caca40a60e6df7dbcac541188516312ccd" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="4f3b1e4f86a744a22aa3b1ba8f234cc56bfcc041e7b52d8f442b6f83d2a98584" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="adea427a3a5fb34c6048aed3e2290bead984985ef568b7203f93ed96de1aa2cd" name="librdmacm-utils" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="3f79090925a7da614af19870d3e1c74d63c9e9d19c83f63aafe3013831f8ae97" name="mlnx-tools" arch="noarch">
  <version epoch="0" ver="25.01" rel="1.el10_0cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-1" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="7794fa64e0e87a7a6b8ee7544441c050ab960876b55a7936c6fcd212392b9406" name="mlnx-tools" arch="noarch">
  <version epoch="0" ver="25.01" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-1" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="03203726ca26091cbd938589e5ea1f324e9661eb45d79547c861bba3bfadcc2a" name="mlnx-tools" arch="noarch">
  <version epoch="0" ver="2510.0.14" rel="2.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 2510.0.14-2" date="1764849600">- Update for DOCA 3.2.0</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 25.01-1" date="1741694400">- Initial rebuild for Rocky</changelog>
</package>
<package pkgid="3f4b5dffcd1f8bd4644e7559c6cb3143ea18c00867ee022906bb4fb2e64b9446" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="8d53cb0b06de416e98299a278d9d8a43211345c023dc6ba64f40a3ebfc9c9b40" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="e127c001c57622d207fea7b064c14aab4364e90ff98521396d891e8e1759f061" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="d1f74ccfe53f6b4bf5c415e277c01f91b94a1d5757d89c631756f7ec70e0e450" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="162f05c4168ed1341f9e60fd0f6335a1bdf5153fff6d4e070005b6fa91a49954" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="48a0de20e5b67195b75deaddf0e16d13867795b798376ca120683d553402223e" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="08820a31e6902c41d06bffbe786f231f5da843b0136bf88f1109e88c71465da9" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="e9b503bf53461edf736ba4c0d0f156fb152b49a9535cb5fb99a0e85e8953fba9" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="cae8ce5a6c65cf04616dcc2acfcb670e34bc7edf086a88750036b9bf623eb59e" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="d1fa5831106644294f4c2b4bf68ed344fd47b4c1178833e95707afe19564504f" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="a6a1898a922fcf593fe4aa076d71609cc4132c411675fcd681f883cc0178b9c7" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="288bfb117008e0b8bf75e34c253ff886f89de1f69c1bb925dc2d323c8f95e0ba" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="040b9de679769b6db0f6bdb3d2fafd647d8b18b5a93907b10baeb0cd74e8f748" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="93c941b17eb0092c140909ae56e9e52b5ae92e1824c30e5a474f35773ef0187e" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="2da51faa6c579c36dc2cb7c70da6e8d0cc202aece6e18d2ba8a60ec8a731ccb9" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="5e4bce542ed8d57e2ceeab531b3b1392f6ad910f1f50aae134682ba14a839cef" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="a74935f8310485dc228887750b712e2a6ddce75ce1cd71e6e30bf8e632d83ff3" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="fcab22f8cac7a4fed91d78691e14d4d53da67291e62045ec8748c55c95a117c5" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="8ee0bbeb190efdeef18c831599a90acb67b9674d4afbba6afdd051ed3b4e2172" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="19803c21d5b7c5cca1681b9f32d325ca1001b8ed7d265d31f671d0e892a5d819" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="5f714d46eedcfa17a9c8de930e39d22cfad89f1d1d262903a47256c16d2276c7" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="d514d928d0585c805ebf17cac2ae2033278e99cf3379905d67f7ad20571ea7c1" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="f29278648af506f58b1619112583db8fbb61f4f8067d8443d9b9c557c2d68aad" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="695b54831c2eb44ba1cf06961a3990d492fb2007639f9eb83edc16240e4b76db" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="d26d46fcae9e552a7b9f6f76a3020ed239070f3dba4bd4912e8fd8c5d3363bc4" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="21ebd116d99167b5111482f20c7f0d82e275d49454824ff22bdc8b8ab3bc4e86" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="136476652b04868dba1947b29102c4fdde72da82cb68f27d63329eb835a1e1dc" name="perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="f664187a25a5c093e16c1044267f5a96f4cf4ac8f7565dfc29f289a131708f46" name="python3-dnf-plugin-protected-kmods" arch="noarch">
  <version epoch="0" ver="0.9.5" rel="1.el10_0.cld_next"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.9.5-1" date="1751976000">- Initial release for EPEL</changelog>
</package>
<package pkgid="0b71a3075ca671f7fc3ee3cebe8071679048c337cca15ef758d1725dea5bd729" name="python3-dnf-plugin-protected-kmods" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.0.0-1" date="1761652800">- Add support for different kernel variants
- Ensure matching kernels aren't excluded for installed kmods, even if the kmod is not available in the
  enabled repositories</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.9.5-1" date="1751976000">- Initial release for EPEL</changelog>
</package>
<package pkgid="db17a53a6a44a3361021cb579f09fc54d374e1226a99178f9ebcd870da723f23" name="python3-dnf-plugin-protected-kmods" arch="noarch">
  <version epoch="0" ver="1.0.1" rel="1.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.0.1-1" date="1770120000">- Fix issue where kernel updates were blocked if the new kernel had the same release, but different version
  (e.g., 5.10.0-1 vs 5.10.1-1).  Not a problem for EL kernels, but could be for custom kernels.</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 1.0.0-1" date="1761652800">- Add support for different kernel variants
- Ensure matching kernels aren't excluded for installed kmods, even if the kmod is not available in the
  enabled repositories</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 0.9.5-1" date="1751976000">- Initial release for EPEL</changelog>
</package>
<package pkgid="62bc661565e5ac1113c39d649e53e615a34226a9601cff8d770c62b1d226d3e5" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="8dd39eef57ffcc40aadaa974997e644dbe19ab5232df45b96913c651cd5e6213" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="4e9d56724e8886c05aa40a79be116b8b4f944d86a1b1a217fc7a631718d5ff19" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="e9002addf3324b17a3f4277e3b39f27f9e6f76b4308c348339b743d5db5a2a0d" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="f3545f1c0f551ee44e95e27694385f0797ddf7850524e4d3b42d30544be2df35" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="0312d836c06f7c983c807afdc9bb93dd886a707e58daa87611216f404f798e78" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="6e18d937e3d3277b1803ec3b103545a82c9b3ae55061800c36ceb039f69f1a68" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="113e45a032cd7ea56c47f75a2dbabe775dbbd45cae9c4fb651c6996082b18ead" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="2f35d981c87583ba89afb2f3efb03c009520324725a0d8693a84fb27bbcd3372" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="66d2fa2c3c001eb88206057e5716dea437aa65d02eeb69d3430cf59b183193c5" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="4116924058bdfb617d9106be42b2debd72219c8605758080518527d3e8ceb052" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="15ecb49de1c5992683007ae19c78ec8ae567afc4cd05f3edf7c4ee8285b285f5" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="aee0c6e081d58e2eb11b6491b728e5d205138589ff852a8cc190214d00c04bd7" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="34b13ab6691261734aa042870c3eac67e96feb695211bbcb98864a463d7c7fa0" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="2927af339e6c8b98c306dcd0796477f7d06fa0aaf13321c42fb030abea499274" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="b203a46f1674d0fb512909405ed1cf4e190cc1c3bb927c9c0b766d87bfa055a2" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="566037c98cbb1f97b9c124855ed0d066fe37fec3bfc3b1e5da639dc2e9d8cb32" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="ceaad257ff9ae90c844d7f156c58b27984ae4912cd303feba27fa4d14e5d7e6e" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="19314782d55c545b61d14ae23cbf1ab42f25b00349063542a2723c4bfdfe1512" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="bb22f27c4fe5e4a8716172f2dc9e5b613eb18d993d02ba4e17fe0a633025d70c" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="b553aaf74a217479afd50b4371001d2cbe8583005d6311e7e055d6cb79791ac4" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="9ffa33a5872909220f37e41d9a690ab3d5874cb7d766523c487bd4ed2c7520df" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="4a7f7c41ce09f6ca24efa4b51ff7353605dbb24c4e7571d1ecc2253626ec26d1" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="c32cda0954a192aec5ea9f4cebf90e60b01b7ae1e3f0efae319f4e0e26bc7b9f" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="31a9b375bd586341a7faea6a7daa4c8bca801d3898a46bb40c2c131211169a12" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="ce31da79f81f8f58b607f76638ac31e91186bc4720fde2d6529021af2f36fc72" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="5a9a78e2e1a7900386db17e2b878e5457cd969590dae26b33de61ea4db54a343" name="python3-perf" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="e34c16e4eda5bb123d2616bd8d1b1b4019bc9194e0ea55443a857bc0f57c2e57" name="python3-pyverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="6aa1528e1a46468e3d0f943315fdf720417ac72cef3d815242d22215cf4f549b" name="python3-pyverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="cc04241c95f005bf87afe5a17a2ba48e55b7a6cdc23678061f25c5eb84a5156f" name="python3-pyverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="1dc74cc313e1ef892db558a52918408d2f5e3ddf7e8af76f942121f24e1dd740" name="python3-pyverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="b0b88ce9aa781a8600d14f92ce36f8c2b314a1a949165048b22c7804efa8e0e2" name="python3-pyverbs" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="d166b963dec391e1c082accbb94999e24d3c540b6b74391b31a6872e1b845e6c" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="8f46c9161b733382044980670ea8adbe59278be5ce3712fb15e29c4190d4e101" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="3b7508948b8b4a4bd1f90dfd56e96df91d4bf3bf1a6b0f6d6c47b42fe62f4161" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="89082af232c6f8e3be65ee239969f68012d7292c50d91f33fff53b91cf872e52" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="631f955ba1012acaf6e1151e63558a8f03d06c54870727b4a8ed3df097e2513f" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="0b032b6723853de1d5dba59e26431dcbaa8396da86d087c107648546c8a5e792" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="d3118d30d2bb92f04202f08e4f4c01aa3cd08380db522f28dcdc8935aeebf96b" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="df848558c2807dcf73b2c4395f756f111e1a61a3013ef11a5fb98f250c6dc0aa" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="abaa476c98a0ed0e5a59dcb132f22530296a3b5f87cc490e9025e18f1458b319" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="874bbcf9da9a0f12dc4d2b6e98d521da414ab870b70cb548af2f9e454a482ce1" name="rdma-core-devel" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
<package pkgid="15a5c63dc3d1e481910e103dd4479caa257d666b54b6cea09e940ef66918843d" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="18ca4e3858e5b589d875cfbced7667a7ce92d5d88ed54e16683f74dcb2f927e1" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="ecd093311bc2639dae80656a821969da3b1c8bf9b7311fa040b7467186427ab2" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="b1915fb880f1e8d2ddf1f1eba64e2e12705e915a6ba814026669bfa9c1390dfb" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="fdbf9c5065c498fc558e8a204ad63dbffa641436049e421a3df5b096c570136e" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="8c7498a95878b985fc9af58f278afe17b17375644da52ff3b8ef53fb284e8c0e" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="255d5f7addfb2dca98dad48bb47dcd6c682b67a1de45dbb51447a85dd5ef8c14" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="6c7681c8b6d03752613ba67b2bdc4974ccbe6b923ee9189c592634ac7e8e68cb" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="4bd8e6454893c12613fdb1b875b891030355855887f57f0dd4018244ebf90337" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="56e0c58ad24aec6e5e4b5d8b03204f3cf82d141e2d63791c71abce2a0a7b621c" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="e709874be597e3f78a836b78e4ba3230d693e4edd85425fe24c476c803e81346" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="dcc5fe69535f6859c606319eb54fe9b658df0b7e8926a5863063c4177482b80b" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="c11cb070359d9b8b326f3c66adee8c598ca3ef9fbd68fdcf33c94a27518f0f68" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="dd73a806a4a492287a88790209f58ad74c136dbdf1b91d450e670e5ecfeb5506" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="245392fb7bc22c793c64b978264b773246104b23eca45d3408869d5133036807" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="e22c064475093823738b2672ebe0d9ae0543757b7476a5215553b8f11c8e0ae4" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="394201e3ca160951388dccb32dbfc19923d2fdaae211821e7f623e19b6bbe21f" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="101fe9328341fd8a76b4d6164b143a510b9531ea37203c84bc3cfac44e807192" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="069764f3f40cad0925e422b46209df667d1610a9cfdfa88810faa272f8dab8e4" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="4ff0d56e6aa35efaed6038e9f000176dbcffb3a3f38d00a2abb66bacc730c0e7" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="58ea8e590cb0b31cc97938f26de2bbd7faa17028393e0fa8ad55f2ebe9549749" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="06cf707e5e38593d404c3a58d101292e7cc74dfce3a6a446962c93dad011378f" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="c1324eff996caadd62579eb4ae1d1176de937ccb03e034d8f76c832676c56c71" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="4e0da8d22cc94606a78213f1e35462b958ea183e7dca09e13c6b536c171a71a3" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="37ac36fe6c5c37fcf37b789f2d53ef06c9f9ea5a08cf3e9078b5a2ef34d01093" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="0bd6274ea94c2f248e52a8b44912efe574623feb4c3e288ae22c729ede2a82f1" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="474be21838f7cd7ef3df7ffd0ec567a0199ca9227d1a88aa774da9e709564c85" name="rtla" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="8bcbe9174f5c7f806792780b3f2b6462f5d4457e3999282653b258be29f3f00d" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.30.1.el10_0cld_next.2.1"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.2.1" date="1757505601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.30.1.el10_0.cld_next.1.1" date="1757505600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.30.1" date="1756814400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.25.1.el10_0]" date="1753704000">- net_sched: hfsc: Address reentrant enqueue adding class to eltree twice (Ivan Vecera) [RHEL-97533] {CVE-2025-38001}
- sch_hfsc: Fix qlen accounting bug when using peek in hfsc_enqueue() (Davide Caratti) [RHEL-97533] {CVE-2025-38000}
- net_sched: hfsc: Fix a UAF vulnerability in class with netem as child qdisc (Ivan Vecera) [RHEL-97533] {CVE-2025-37890}
- sch_hfsc: make hfsc_qlen_notify() idempotent (Ivan Vecera) [RHEL-97533]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (Michal Schmidt) [RHEL-99060] {CVE-2025-38022}
- RDMA/core: Fix use-after-free when rename device name (Michal Schmidt) [RHEL-99060] {CVE-2025-22085}
- nvme-tcp: sanitize request list handling (CKI Backport Bot) [RHEL-103235] {CVE-2025-38264}
- net: tipc: fix refcount warning in tipc_aead_encrypt (Xin Long) [RHEL-103097]
- net/tipc: fix slab-use-after-free Read in tipc_aead_encrypt_done (CKI Backport Bot) [RHEL-103097] {CVE-2025-38052}
- tcp: adjust rcvq_space after updating scaling ratio (Guillaume Nault) [RHEL-101775]
- ext4: avoid journaling sb update on error if journal is destroying (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- ext4: define ext4_journal_destroy wrapper (CKI Backport Bot) [RHEL-93608] {CVE-2025-22113}
- HID: intel-ish-hid: Fix use-after-free issue in ishtp_hid_remove() (CKI Backport Bot) [RHEL-98862] {CVE-2025-21928}
- HID: intel-ish-hid: Fix use-after-free issue in hid_ishtp_cl_remove() (CKI Backport Bot) [RHEL-98886] {CVE-2025-21929}
- usb: hub: Fix flushing of delayed work used for post resume purposes (Desnes Nunes) [RHEL-104681]
- usb: hub: Fix flushing and scheduling of delayed work that tunes runtime pm (Desnes Nunes) [RHEL-104681]
- usb: hub: fix detection of high tier USB3 devices behind suspended hubs (Desnes Nunes) [RHEL-104681]
- net/sched: fix use-after-free in taprio_dev_notifier (CKI Backport Bot) [RHEL-101322] {CVE-2025-38087}
- net: ch9200: fix uninitialised access during mii_nway_restart (CKI Backport Bot) [RHEL-101224] {CVE-2025-38086}
- padata: avoid UAF for reorder_work (Waiman Long) [RHEL-97040] {CVE-2025-21726}
- padata: fix UAF in padata_reorder (Waiman Long) [RHEL-97040] {CVE-2025-21727}
- padata: add pd get/put refcnt helper (Waiman Long) [RHEL-97040]
- padata: fix sysfs store callback check (Waiman Long) [RHEL-97040]
- padata: Clean up in padata_do_multithreaded() (Waiman Long) [RHEL-97040]
- memstick: rtsx_usb_ms: Fix slab-use-after-free in rtsx_usb_ms_drv_remove (CKI Backport Bot) [RHEL-99041] {CVE-2025-22020}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.24.1.el10_0]" date="1753272000">- net_sched: hfsc: Fix a UAF vulnerability in class handling (CKI Backport Bot) [RHEL-95867] {CVE-2025-37797}</changelog>
</package>
<package pkgid="3ea69e27d285cc8bff06f08918dd38c391a3bf691b8e6a9cddf91443a71905ed" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.32.1.el10_0cld_next.2.1"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0.cld_next.2.1" date="1758801601">- net: mana: Handle Reset Request from MANA NIC (Shreeya Patel) [ciqres]
- net: mana: Add handler for hardware servicing events (Shreeya Patel) [ciqres]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Shreeya Patel) [ciqres]
- net: mana: Switch to page pool for jumbo frames (Shreeya Patel) [ciqres]
- net: mana: Support holes in device list reply msg (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Shreeya Patel) [ciqres]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Shreeya Patel) [ciqres]
- net: mana: Add debug logs in MANA network driver (Shreeya Patel) [ciqres]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Shreeya Patel) [ciqres]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Shreeya Patel) [ciqres]
- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]
- net: mana: Add support for Multi Vports on Bare metal (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.32.1.el10_0cld_next.1.1" date="1758801600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.32.1" date="1757592000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.32.1.el10_0]" date="1757419200">- posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del() (CKI Backport Bot) [RHEL-112784] {CVE-2025-38352}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.31.1.el10_0]" date="1756641600">- sched/fair: Adhere to place_entity() constraints (Phil Auld) [RHEL-91404]
- sched/fair: Fix update_cfs_group() vs DELAY_DEQUEUE (Phil Auld) [RHEL-91404]
- sched/fair: Fix EEVDF entity placement bug causing scheduling lag (Phil Auld) [RHEL-91404]
- sched/fair: optimize the PLACE_LAG when se-&gt;vlag is zero (Phil Auld) [RHEL-91404]
- net/sched: ets: use old 'nbands' while purging unused classes (Ivan Vecera) [RHEL-107544] {CVE-2025-38350}
- net/sched: Always pass notifications when child class becomes empty (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- net_sched: ets: fix a race in ets_qdisc_change() (Ivan Vecera) [RHEL-107544] {CVE-2025-38107}
- sch_htb: make htb_deactivate() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37953}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (Ivan Vecera) [RHEL-93365] {CVE-2025-37798}
- sch_qfq: make qfq_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (Ivan Vecera) [RHEL-93365] {CVE-2025-37932}
- drm/vkms: Fix use after free and double free on init error (Jocelyn Falempe) [RHEL-99432] {CVE-2025-22097}
- Revert "cxl/acpi: Fix load failures due to single window creation failure" (John W. Linville) [RHEL-85055]
- udmabuf: fix a buf size overflow issue during udmabuf creation (Lyude Paul) [RHEL-99760] {CVE-2025-37803}
- drm/framebuffer: Acquire internal references on GEM handles (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- drm/gem: Acquire references on GEM handles for framebuffers (Mika Penttilä) [RHEL-106710] {CVE-2025-38449}
- nvme/ioctl: don't warn on vectorized uring_cmd with fixed buffer (Maurizio Lombardi) [RHEL-109753]
- nvme-ioctl: fix leaked requests on mapping error (Maurizio Lombardi) [RHEL-109753]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.30.1.el10_0]" date="1756036800">- net_sched: hfsc: Fix a potential UAF in hfsc_dequeue() too (CKI Backport Bot) [RHEL-107641] {CVE-2025-37823}
- s390/pci: Fix zpci_bus_is_isolated_vf() for non-VFs (Mete Durlu) [RHEL-95537]
- s390/pci: Fix handling of isolated VFs (CKI Backport Bot) [RHEL-84462]
- s390/pci: Pull search for parent PF out of zpci_iov_setup_virtfn() (CKI Backport Bot) [RHEL-84462]
- s390/pci: Fix SR-IOV for PFs initially in standby (CKI Backport Bot) [RHEL-84462]
- RDMA/iwcm: Fix use-after-free of work objects after cm_id destruction (CKI Backport Bot) [RHEL-104285] {CVE-2025-38211}
- udp: Fix memory accounting leak. (CKI Backport Bot) [RHEL-104102] {CVE-2025-22058}
- udp: Fix multiple wraparounds of sk-&gt;sk_rmem_alloc. (Xin Long) [RHEL-104102]
- ext4: only dirty folios when data journaling regular files (CKI Backport Bot) [RHEL-106815] {CVE-2025-38220}
- tipc: Fix use-after-free in tipc_conn_close(). (CKI Backport Bot) [RHEL-106660] {CVE-2025-38464}
- vsock: Fix transport_* TOCTOU (CKI Backport Bot) [RHEL-106015] {CVE-2025-38461}
- netfilter: nf_conntrack: fix crash due to removal of uninitialised entry (CKI Backport Bot) [RHEL-106442] {CVE-2025-38472}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.29.1.el10_0]" date="1755432000">- ice: fix eswitch code memory leak in reset scenario (CKI Backport Bot) [RHEL-108153] {CVE-2025-38417}
- net/sched: Abort __tc_modify_qdisc if parent class does not exist (CKI Backport Bot) [RHEL-107896]
- net_sched: ets: Fix double list add in class with netem as child qdisc (CKI Backport Bot) [RHEL-104727] {CVE-2025-37914}
- sch_ets: make est_qlen_notify() idempotent (Ivan Vecera) [RHEL-104727]
- i40e: fix MMIO write access to an invalid page in i40e_clear_hw (Dennis Chen) [RHEL-106047] {CVE-2025-38200}
- cxgb4: use port number to set mac addr (CKI Backport Bot) [RHEL-79668]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-55.28.1.el10_0]" date="1754913600">- tls: always refresh the queue when reading sock (CKI Backport Bot) [RHEL-106091] {CVE-2025-38471}
- selftests: net: bpf_offload: add 'libbpf_global' to ignored maps (Hangbin Liu) [RHEL-105901]
- selftests: net: fix error message in bpf_offload (Hangbin Liu) [RHEL-105901]
- selftests: net: add more info to error in bpf_offload (Hangbin Liu) [RHEL-105901]
- net: fix udp gso skb_segment after pull from frag_list (Guillaume Nault) [RHEL-103035] {CVE-2025-38124}
- powerpc/pseries/vas: Add close() callback in vas_vm_ops struct (Mamatha Inamdar) [RHEL-87181]
- s390/pci: Serialize device addition and removal (CKI Backport Bot) [RHEL-100158]
- s390/pci: Allow re-add of a reserved but not yet removed device (CKI Backport Bot) [RHEL-100158]
- s390/pci: Prevent self deletion in disable_slot() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Remove redundant bus removal and disable from zpci_release_device() (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix duplicate pci_dev_put() in disable_slot() when PF has child VFs (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix missing check for zpci_create_device() error return (CKI Backport Bot) [RHEL-100158]
- s390/pci: Fix potential double remove of hotplug slot (CKI Backport Bot) [RHEL-100158]
- s390/topology: Improve topology detection (CKI Backport Bot) [RHEL-92096]
- Bluetooth: hci_core: Fix use-after-free in vhci_flush() (CKI Backport Bot) [RHEL-103270] {CVE-2025-38250}
- redhat: Mark kernel incompatible with xdp-tools&lt;1.5.4 (Felix Maurer) [RHEL-100447]
- selftests/bpf: Adjust data size to have ETH_HLEN (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- bpf, test_run: Fix use-after-free issue in eth_skb_pkt_type() (Felix Maurer) [RHEL-100447] {CVE-2025-21867}
- i2c/designware: Fix an initialization issue (CKI Backport Bot) [RHEL-106626] {CVE-2025-38380}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.27.1.el10_0]" date="1754654400">- Revert "sch_htb: make htb_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_drr: make drr_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "sch_qfq: make qfq_qlen_notify() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog()" (Jan Stancek) [RHEL-108141]
- Revert "sch_htb: make htb_deactivate() idempotent" (Jan Stancek) [RHEL-108141]
- Revert "net/sched: Always pass notifications when child class becomes empty" (Jan Stancek) [RHEL-108141]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.26.1.el10_0]" date="1754222400">- wifi: rtw88: fix the 'para' buffer size to avoid reading out of bounds (CKI Backport Bot) [RHEL-103169] {CVE-2025-38159}
- Documentation: Fix pci=config_acs= example (Steve Dunnagan) [RHEL-102663]
- PCI/ACS: Fix 'pci=config_acs=' parameter (Steve Dunnagan) [RHEL-102663]
- Revert "smb: client: fix TCP timers deadlock after rmmod" (Paulo Alcantara) [RHEL-106417] {CVE-2025-22077}
- Revert "smb: client: Fix netns refcount imbalance causing leaks and use-after-free" (Paulo Alcantara) [RHEL-106417]
- smb: client: Fix netns refcount imbalance causing leaks and use-after-free (Paulo Alcantara) [RHEL-106417]
- wifi: ath12k: fix invalid access to memory (CKI Backport Bot) [RHEL-103228] {CVE-2025-38292}
- x86/CPU/AMD: Terminate the erratum_1386_microcode array (CKI Backport Bot) [RHEL-104884] {CVE-2024-56721}
- crypto: algif_hash - fix double free in hash_accept (CKI Backport Bot) [RHEL-102247] {CVE-2025-38079}
- net/sched: Always pass notifications when child class becomes empty (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_deactivate() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- codel: remove sch-&gt;q.qlen check before qdisc_tree_reduce_backlog() (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_qfq: make qfq_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_drr: make drr_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- sch_htb: make htb_qlen_notify() idempotent (CKI Backport Bot) [RHEL-93365] {CVE-2025-38350}
- redhat: update BUILD_TARGET to use rhel-10.0-z-test-pesign (Jan Stancek)
- mm/hugetlb: fix huge_pmd_unshare() vs GUP-fast race (Rafael Aquini) [RHEL-101263] {CVE-2025-38085}
- mm/hugetlb: unshare page tables during VMA split, not before (Rafael Aquini) [RHEL-101298] {CVE-2025-38084}
- tools/testing/vma: add missing function stub (Rafael Aquini) [RHEL-101298]
- mm: fix copy_vma() error handling for hugetlb mappings (Rafael Aquini) [RHEL-101298]
- PCI: Use downstream bridges for distributing resources (Jennifer Berringer) [RHEL-102664]
- PCI/pwrctrl: Cancel outstanding rescan work when unregistering (Myron Stowe) [RHEL-103212] {CVE-2025-38137}
- bnxt_en: Skip MAC loopback selftest if it is unsupported by FW (CKI Backport Bot) [RHEL-82538]
- bnxt_en: Skip PHY loopback ethtool selftest if unsupported by FW (CKI Backport Bot) [RHEL-82538]</changelog>
</package>
<package pkgid="fddf3b36a45f2e0b8360c244f9d09fbb529ee179acf25db0037e55afdcae3ab1" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.40.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+2.1.el10_0_ciq" date="1761652801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.40.1+1.1.el10_0_ciq" date="1761652800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.40.1" date="1761134400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.34.1.el10_0]" date="1757937600">- sunrpc: fix handling of server side tls alerts (Olga Kornievskaia) [RHEL-111073] {CVE-2025-38566}
- i40e: When removing VF MAC filters, only check PF-set MAC (CKI Backport Bot) [RHEL-109771]
- usb: dwc3: gadget: check that event count does not exceed event buffer length (CKI Backport Bot) [RHEL-107659] {CVE-2025-37810}</changelog>
</package>
<package pkgid="76eac3a3dfce66e2c31fb099d4b945b0288be984e0a2606c43fa6619f592e07c" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.41.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+2.1.el10_0_ciq" date="1762171201">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.41.1+1.1.el10_0_ciq" date="1762171200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.41.1" date="1761825600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.35.1.el10_0]" date="1758283200">- cifs: Fix reading into an ITER_FOLIOQ from the smbdirect code (Paulo Alcantara) [RHEL-111177]
- cifs: Fix the smbd_response slab to allow usercopy (Paulo Alcantara) [RHEL-111177] {CVE-2025-38523}
- smb: client: let smbd_post_send_iter() respect the peers max_send_size and transmit all data (Paulo Alcantara) [RHEL-111177]
- smb: client: fix max_sge overflow in smb_extract_folioq_to_rdma() (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: introduce smbdirect_socket_parameters (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_socket (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_socket.h (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect.h with public structures (Paulo Alcantara) [RHEL-111177]
- smb: client: make use of common smbdirect_pdu.h (Paulo Alcantara) [RHEL-111177]
- smb: smbdirect: add smbdirect_pdu.h with protocol definitions (Paulo Alcantara) [RHEL-111177]
- s390/sclp: Fix SCCB present check (CKI Backport Bot) [RHEL-113561] {CVE-2025-39694}
- net: stmmac: fix TSO DMA API usage causing oops (Izabela Bakollari) [RHEL-105352]
- smb: client: fix use-after-free in cifs_oplock_break (CKI Backport Bot) [RHEL-111198] {CVE-2025-38527}</changelog>
</package>
<package pkgid="1a3b4a33bbf3601110be9d8b11f854d196b16df41cc4d25c66df2ce457bbe137" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.42.1+2.1.el10_0_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+2.1.el10_0_ciq" date="1762776001">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.42.1+1.1.el10_0_ciq" date="1762776000">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.42.1" date="1762344000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.37.1.el10_0]" date="1758715200">- selftests: tls: add tests for zero-length records (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- tls: fix handling of zero-length records on the rx_list (Sabrina Dubroca) [RHEL-114331] {CVE-2025-39682}
- fs: export anon_inode_make_secure_inode() and fix secretmem LSM bypass (Audra Mitchell) [RHEL-110313] {CVE-2025-38396}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.36.1.el10_0]" date="1758542400">- io_uring/futex: ensure io_futex_wait() cleans up properly on failure (CKI Backport Bot) [RHEL-114341] {CVE-2025-39698}
- ice: use fixed adapter index for E825C embedded devices (CKI Backport Bot) [RHEL-111792]
- ice: use DSN instead of PCI BDF for ice_adapter index (CKI Backport Bot) [RHEL-111792]
- tcp: drop secpath at the same time as we currently drop dst (Sabrina Dubroca) [RHEL-82133]</changelog>
</package>
<package pkgid="3306ace91ed6d9749b44615c197063b5a7fd14e535cd8abac327c29c5913b185" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="55.43.1+2.2.el10_0_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-55.43.1+2.2.el10_0_ciq" date="1763380802">- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+2.1.el10_0_ciq" date="1763380801">- Drivers: hv: vmbus: Remove vmbus_sendpacket_pagebuffer() (Shreeya Patel) [ciqres]
- hv_netvsc: Remove rmsg_pgcnt (Shreeya Patel) [ciqres]
- hv_netvsc: Preserve contiguous PFN grouping in the page buffer array (Shreeya Patel) [ciqres]
- hv_netvsc: Use vmbus_sendpacket_mpb_desc() to send VMBus messages (Shreeya Patel) [ciqres]
- Drivers: hv: Allow vmbus_sendpacket_mpb_desc() to create multiple ranges (Shreeya Patel) [ciqres]
- scsi: storvsc: Increase the timeouts to storvsc_timeout (Sultan Alsawaf) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-55.43.1+1.1.el10_0_ciq" date="1763380800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-55.43.1" date="1762776000">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.43.1.el10_0]" date="1762171200">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122878] {CVE-2025-39864}
- igc: fix lock order in igc_ptp_reset (CKI Backport Bot) [RHEL-118667]
- igc: add lock preventing multiple simultaneous PTM transactions (CKI Backport Bot) [RHEL-118667]
- igc: cleanup PTP module if probe fails (CKI Backport Bot) [RHEL-118667]
- igc: handle the IGC_PTP_ENABLED flag correctly (CKI Backport Bot) [RHEL-118667]
- igc: move ktime snapshot into PTM retry loop (CKI Backport Bot) [RHEL-118667]
- igc: increase wait time before retrying PTM (CKI Backport Bot) [RHEL-118667]
- igc: fix PTM cycle trigger logic (CKI Backport Bot) [RHEL-118667]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113363]
- cxgb4: Avoid removal of uninserted tid (CKI Backport Bot) [RHEL-112148]
- powerpc/pseries/iommu: memory notifier incorrectly adds TCEs for pmemory (Mamatha Inamdar) [RHEL-103014]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- Revert "mm/execmem: Unify early execmem_cache behaviour" (Waiman Long) [RHEL-92175]
- x86/Kconfig: only enable ROX cache in execmem when STRICT_MODULE_RWX is set (Waiman Long) [RHEL-92175]
- x86/mm/pat: don't collapse pages without PSE set (Waiman Long) [RHEL-92175]
- tools arch x86: Sync the msr-index.h copy with the kernel sources (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Add new CPUs 'k' values for branch mitigation (Waiman Long) [RHEL-92175]
- arm64: bpf: Only mitigate cBPF programs loaded by unprivileged users (Waiman Long) [RHEL-92175] {CVE-2025-37963}
- arm64: bpf: Add BHB mitigation to the epilogue for cBPF programs (Waiman Long) [RHEL-92175] {CVE-2025-37948}
- arm64: proton-pack: Expose whether the branchy loop k value (Waiman Long) [RHEL-92175]
- arm64: proton-pack: Expose whether the platform is mitigated by firmware (Waiman Long) [RHEL-92175]
- arm64: insn: Add support for encoding DSB (Waiman Long) [RHEL-92175]
- selftest/x86/bugs: Add selftests for ITS (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/ibt: Keep IBT disabled during alternative patching (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- mm/execmem: Unify early execmem_cache behaviour (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Align RETs in BHB clear sequence to avoid thunking (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for RSB stuffing mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add "vmexit" option to skip mitigation on some CPUs (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enable Indirect Target Selection mitigation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- redhat/configs: Enable CONFIG_MITIGATION_ITS for x86 (Waiman Long) [RHEL-92175]
- x86/its: Add support for ITS-safe return thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Add support for ITS-safe indirect thunk (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- x86/its: Enumerate Indirect Target Selection (ITS) bug (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- Documentation: x86/bugs/its: Add ITS documentation (Waiman Long) [RHEL-92175] {CVE-2024-28956}
- KVM: SVM: Set/clear SRSO's BP_SPEC_REDUCE on 0 &lt;=&gt; 1 VM count transitions (Waiman Long) [RHEL-92175]
- x86/bugs: Add RSB mitigation document (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on context switch with eIBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Don't fill RSB on VMEXIT with eIBRS+retpoline (Waiman Long) [RHEL-92175]
- x86/bugs: Fix RSB clearing in indirect_branch_prediction_barrier() (Waiman Long) [RHEL-92175]
- x86/bugs: Use SBPB in write_ibpb() if applicable (Waiman Long) [RHEL-92175]
- x86/bugs: Rename entry_ibpb() to write_ibpb() (Waiman Long) [RHEL-92175]
- x86/bugs: Make spectre user default depend on MITIGATION_SPECTRE_V2 (Waiman Long) [RHEL-92175]
- x86/bugs: Use the cpu_smt_possible() helper instead of open-coded code (Waiman Long) [RHEL-92175]
- x86/bugs: Add AUTO mitigations for mds/taa/mmio/rfds (Waiman Long) [RHEL-92175]
- x86/bugs: Relocate mds/taa/mmio/rfds defines (Waiman Long) [RHEL-92175]
- x86/bugs: Add X86_BUG_SPECTRE_V2_USER (Waiman Long) [RHEL-92175]
- x86/bugs: Remove X86_FEATURE_USE_IBPB (Waiman Long) [RHEL-92175]
- KVM: nVMX: Always use IBPB to properly virtualize IBRS (Waiman Long) [RHEL-92175]
- x86/bugs: Use a static branch to guard IBPB on vCPU switch (Waiman Long) [RHEL-92175]
- x86/bugs: Remove the X86_FEATURE_USE_IBPB check in ib_prctl_set() (Waiman Long) [RHEL-92175]
- x86/mm: Remove X86_FEATURE_USE_IBPB checks in cond_mitigation() (Waiman Long) [RHEL-92175]
- x86/bugs: Move the X86_FEATURE_USE_IBPB check into callers (Waiman Long) [RHEL-92175]
- x86/bugs: KVM: Add support for SRSO_MSR_FIX (Waiman Long) [RHEL-92175]
- arm64: errata: Assume that unknown CPUs _are_ vulnerable to Spectre BHB (Waiman Long) [RHEL-92175]
- arm64: errata: Add QCOM_KRYO_4XX_GOLD to the spectre_bhb_k24_list (Waiman Long) [RHEL-92175]
- x86/rfds: Exclude P-only parts from the RFDS affected list (Waiman Long) [RHEL-92175]
- x86/cpu: Update x86_match_cpu() to also use cpu-type (Waiman Long) [RHEL-92175]
- x86/cpu: Add cpu_type to struct x86_cpu_id (Waiman Long) [RHEL-92175]
- x86/cpu: Shorten CPU matching macro (Waiman Long) [RHEL-92175]
- x86/cpu: Fix the description of X86_MATCH_VFM_STEPS() (Waiman Long) [RHEL-92175]
- module: don't annotate ROX memory as kmemleak_not_leak() (Waiman Long) [RHEL-92175]
- module: drop unused module_writable_address() (Waiman Long) [RHEL-92175]
- Revert "x86/module: prepare module loading for ROX allocations of text" (Waiman Long) [RHEL-92175]
- module: switch to execmem API for remapping as RW and restoring ROX (Waiman Long) [RHEL-92175]
- execmem: add API for temporal remapping as RW and restoring ROX afterwards (Waiman Long) [RHEL-92175]
- execmem: don't remove ROX cache from the direct map (Waiman Long) [RHEL-92175]
- x86/mm/pat: restore large ROX pages after fragmentation (Waiman Long) [RHEL-92175]
- x86/mm/pat: drop duplicate variable in cpa_flush() (Waiman Long) [RHEL-92175]
- x86/mm/pat: cpa-test: fix length for CPA_ARRAY test (Waiman Long) [RHEL-92175]
- x86/cpu/kvm: SRSO: Fix possible missing IBPB on VM-Exit (Waiman Long) [RHEL-92175]
- x86/cpu: Fix typo in x86_match_cpu()'s doc (Waiman Long) [RHEL-92175]
- x86/cpu: Expose only stepping min/max interface (Waiman Long) [RHEL-92175]
- x86/cpu: Introduce new microcode matching helper (Waiman Long) [RHEL-92175]
- KVM: x86: Advertise SRSO_USER_KERNEL_NO to userspace (Waiman Long) [RHEL-92175]
- x86/bugs: Add SRSO_USER_KERNEL_NO support (Waiman Long) [RHEL-92175]
- module: fix writing of livepatch relocations in ROX text (Waiman Long) [RHEL-92175]
- x86/execmem: fix ROX cache usage in Xen PV guests (Waiman Long) [RHEL-92175]
- alloc_tag: load module tags into separate contiguous memory (Waiman Long) [RHEL-92175]
- alloc_tag: introduce shutdown_mem_profiling helper function (Waiman Long) [RHEL-92175]
- maple_tree: add mas_for_each_rev() helper (Waiman Long) [RHEL-92175]
- x86/module: enable ROX caches for module text on 64 bit (Waiman Long) [RHEL-92175]
- execmem: add support for cache of large ROX pages (Waiman Long) [RHEL-92175]
- x86/module: prepare module loading for ROX allocations of text (Waiman Long) [RHEL-92175]
- arch: introduce set_direct_map_valid_noflush() (Waiman Long) [RHEL-92175]
- module: prepare to handle ROX allocations for text (Waiman Long) [RHEL-92175]
- asm-generic: introduce text-patching.h (Waiman Long) [RHEL-92175]
- mm: vmalloc: don't account for number of nodes for HUGE_VMAP allocations (Waiman Long) [RHEL-92175]
- mm: vmalloc: group declarations depending on CONFIG_MMU together (Waiman Long) [RHEL-92175]
- x86/cpu: Add CPU type to struct cpuinfo_topology (Waiman Long) [RHEL-92175]
- x86/cpufeatures: Add X86_FEATURE_AMD_HETEROGENEOUS_CORES (Waiman Long) [RHEL-92175]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116542]
- ice: fix NULL access of tx-&gt;in_use in ice_ll_ts_intr (Petr Oros) [RHEL-116534]
- ice: fix NULL access of tx-&gt;in_use in ice_ptp_ts_irq (Petr Oros) [RHEL-116534]
- ice: default to TIME_REF instead of TXCO on E825-C (Petr Oros) [RHEL-107466]
- ice: move TSPLL init calls to ice_ptp.c (Petr Oros) [RHEL-107466]
- ice: fall back to TCXO on TSPLL lock fail (Petr Oros) [RHEL-107466]
- ice: wait before enabling TSPLL (Petr Oros) [RHEL-107466]
- ice: add multiple TSPLL helpers (Petr Oros) [RHEL-107466]
- ice: use bitfields instead of unions for CGU regs (Petr Oros) [RHEL-107466]
- ice: read TSPLL registers again before reporting status (Petr Oros) [RHEL-107466]
- ice: clear time_sync_en field for E825-C during reprogramming (Petr Oros) [RHEL-107466]
- ice: add TSPLL log config helper (Petr Oros) [RHEL-107466]
- ice: use designated initializers for TSPLL consts (Petr Oros) [RHEL-107466]
- ice: remove ice_tspll_params_e825 definitions (Petr Oros) [RHEL-107466]
- ice: fix E825-C TSPLL register definitions (Petr Oros) [RHEL-107466]
- ice: rename TSPLL and CGU functions and definitions (Petr Oros) [RHEL-107466]
- ice: move TSPLL functions to a separate file (Petr Oros) [RHEL-107466]
- ice: enable timesync operation on 2xNAC E825 devices (Petr Oros) [RHEL-107466]
- ice: refactor ice_sbq_msg_dev enum (Petr Oros) [RHEL-107466]
- ice: remove SW side band access workaround for E825 (Petr Oros) [RHEL-107466]
- ice/ptp: fix crosstimestamp reporting (Petr Oros) [RHEL-115351]
- ice: fix rebuilding the Tx scheduler tree for large queue counts (Petr Oros) [RHEL-115351]
- ice: create new Tx scheduler nodes for new queues only (Petr Oros) [RHEL-115351]
- ice: fix Tx scheduler error handling in XDP callback (Petr Oros) [RHEL-115351]
- ice: Fix LACP bonds without SRIOV environment (Petr Oros) [RHEL-115351]
- ice: fix vf-&gt;num_mac count with port representors (Petr Oros) [RHEL-115351]
- ice: Check VF VSI Pointer Value in ice_vc_add_fdir_fltr() (Petr Oros) [RHEL-115351]
- ice: fix Get Tx Topology AQ command error on E830 (Petr Oros) [RHEL-115351]
- ice: fix using untrusted value of pkt_len in ice_vc_fdir_parse_raw() (Petr Oros) [RHEL-115351]
- ice: fix input validation for virtchnl BW (Petr Oros) [RHEL-115351]
- ice: validate queue quanta parameters to prevent OOB access (Petr Oros) [RHEL-115351]
- ice: stop truncating queue ids when checking (Petr Oros) [RHEL-115351]
- virtchnl: make proto and filter action count unsigned (Petr Oros) [RHEL-115351]
- ice: fix reservation of resources for RDMA when disabled (Petr Oros) [RHEL-115351]
- ice: health.c: fix compilation on gcc 7.5 (Petr Oros) [RHEL-115351]
- ice: E825C PHY register cleanup (Petr Oros) [RHEL-115351]
- ice: Refactor E825C PHY registers info struct (Petr Oros) [RHEL-115351]
- ice: rename ice_ptp_init_phc_eth56g function (Petr Oros) [RHEL-115351]
- ice: Add E830 checksum offload support (Petr Oros) [RHEL-115351]
- ice: register devlink prior to creating health reporters (Petr Oros) [RHEL-115351]
- ice: Fix switchdev slow-path in LAG (Petr Oros) [RHEL-115351]
- ice: fix memory leak in aRFS after reset (Petr Oros) [RHEL-115351]
- ice: do not configure destination override for switchdev (Petr Oros) [RHEL-115351]
- ice: dpll: Remove newline at the end of a netlink error message (Petr Oros) [RHEL-115351]
- virtchnl: add enumeration for the rxdid format (Petr Oros) [RHEL-115351]
- ice: support Rx timestamp on flex descriptor (Petr Oros) [RHEL-115351]
- virtchnl: add support for enabling PTP on iAVF (Petr Oros) [RHEL-115351]
- ice: refactor ice_fdir_create_dflt_rules() function (Petr Oros) [RHEL-115351]
- ice: Implement PTP support for E830 devices (Petr Oros) [RHEL-115351]
- ice: Refactor ice_ptp_init_tx_* (Petr Oros) [RHEL-115351]
- ice: Add unified ice_capture_crosststamp (Petr Oros) [RHEL-115351]
- ice: Process TSYN IRQ in a separate function (Petr Oros) [RHEL-115351]
- ice: Use FIELD_PREP for timestamp values (Petr Oros) [RHEL-115351]
- ice: Remove unnecessary ice_is_e8xx() functions (Petr Oros) [RHEL-115351]
- ice: Don't check device type when checking GNSS presence (Petr Oros) [RHEL-115351]
- ice: use generic unrolled_count() macro (Petr Oros) [RHEL-115351]
- ice: count combined queues using Rx/Tx count (Petr Oros) [RHEL-115351]
- ice: Add check for devm_kzalloc() (Petr Oros) [RHEL-115351]
- ice: remove invalid parameter of equalizer (Petr Oros) [RHEL-115351]
- ice: fix ice_parser_rt::bst_key array size (Petr Oros) [RHEL-115351]
- ice: Add in/out PTP pin delays (Petr Oros) [RHEL-115351]
- ice: use string choice helpers (Petr Oros) [RHEL-115351]
- ice: add fw and port health reporters (Petr Oros) [RHEL-115351]
- ice: add recipe priority check in search (Petr Oros) [RHEL-115351]
- ice: Add MDD logging via devlink health (Petr Oros) [RHEL-115351]
- ice: add Tx hang devlink health reporter (Petr Oros) [RHEL-115351]
- ice: rename devlink_port.[ch] to port.[ch] (Petr Oros) [RHEL-115351]
- ice: cleanup Rx queue context programming functions (Petr Oros) [RHEL-115351]
- ice: move prefetch enable to ice_setup_rx_ctx (Petr Oros) [RHEL-115351]
- ice: reduce size of queue context fields (Petr Oros) [RHEL-115351]
- ice: use &lt;linux/packing.h&gt; for Tx and Rx queue context data (Petr Oros) [RHEL-115351]
- ice: use structures to keep track of queue context size (Petr Oros) [RHEL-115351]
- ice: remove int_q_state from ice_tlan_ctx (Petr Oros) [RHEL-115351]
- ice: fix incorrect PHY settings for 100 GB/s (Petr Oros) [RHEL-115351]
- ice: fix max values for dpll pin phase adjust (Petr Oros) [RHEL-115351]
- ice: Fix VLAN pruning in switchdev mode (Petr Oros) [RHEL-115351]
- ice: Fix NULL pointer dereference in switchdev (Petr Oros) [RHEL-115351]
- ice: fix PHY timestamp extraction for ETH56G (Petr Oros) [RHEL-115351]
- ice: Unbind the workqueue (Petr Oros) [RHEL-115351]
- ice: use stack variable for virtchnl_supported_rxdids (Petr Oros) [RHEL-115351]
- ice: initialize pf-&gt;supported_rxdids immediately after loading DDP (Petr Oros) [RHEL-115351]
- ice: only allow Tx promiscuous for multicast (Petr Oros) [RHEL-115351]
- ice: support optional flags in signature segment header (Petr Oros) [RHEL-115351]
- ice: refactor "last" segment of DDP pkg (Petr Oros) [RHEL-115351]
- ice: extend dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: rework of dump serdes equalizer values feature (Petr Oros) [RHEL-115351]
- ice: Support VF queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- virtchnl: fix m68k build. (Petr Oros) [RHEL-115351]
- virtchnl: support queue rate limit and quanta size configuration (Petr Oros) [RHEL-115351]
- ice: Cleanup unused declarations (Petr Oros) [RHEL-115351]
- ice: Use common error handling code in two functions (Petr Oros) [RHEL-115351]
- ice: Make use of assign_bit() API (Petr Oros) [RHEL-115351]
- ice: store max_frame and rx_buf_len only in ice_rx_ring (Petr Oros) [RHEL-115351]
- ice: consistently use q_idx in ice_vc_cfg_qs_msg() (Petr Oros) [RHEL-115351]
- ice: Implement ethtool reset support (Petr Oros) [RHEL-115351]
- ice: Add correct PHY lane assignment (Petr Oros) [RHEL-115351]
- ice: Fix ETH56G FC-FEC Rx offset value (Petr Oros) [RHEL-115351]
- ice: Fix quad registers read on E825 (Petr Oros) [RHEL-115351]
- ice: Fix E825 initialization (Petr Oros) [RHEL-115351]
- unroll: add generic loop unroll helpers (CKI Backport Bot) [RHEL-115351]
- devlink: add devlink_fmsg_dump_skb() function (Petr Oros) [RHEL-115351]
- devlink: add devlink_fmsg_put() macro (Petr Oros) [RHEL-115351]
- redhat: configs: enable CONFIG_PACKING (Petr Oros) [RHEL-115351]
- lib: packing: catch kunit_kzalloc() failure in the pack() test (CKI Backport Bot) [RHEL-115351]
- lib: packing: document recently added APIs (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack_fields() and unpack_fields() (CKI Backport Bot) [RHEL-115351]
- lib: packing: demote truncation error in pack() to a warning in __pack() (CKI Backport Bot) [RHEL-115351]
- lib: packing: create __pack() and __unpack() variants without error checking (CKI Backport Bot) [RHEL-115351]
- lib: packing: use GENMASK() for box_mask (CKI Backport Bot) [RHEL-115351]
- lib: packing: use BITS_PER_BYTE instead of 8 (CKI Backport Bot) [RHEL-115351]
- lib: packing: fix QUIRK_MSB_ON_THE_RIGHT behavior (CKI Backport Bot) [RHEL-115351]
- lib: packing: add additional KUnit tests (CKI Backport Bot) [RHEL-115351]
- lib: packing: add KUnit tests adapted from selftests (CKI Backport Bot) [RHEL-115351]
- lib: packing: duplicate pack() and unpack() implementations (CKI Backport Bot) [RHEL-115351]
- lib: packing: add pack() and unpack() wrappers over packing() (CKI Backport Bot) [RHEL-115351]
- lib: packing: remove kernel-doc from header file (CKI Backport Bot) [RHEL-115351]
- lib: packing: adjust definitions and implementation for arbitrary buffer lengths (CKI Backport Bot) [RHEL-115351]
- lib: packing: refuse operating on bit indices which exceed size of buffer (CKI Backport Bot) [RHEL-115351]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.42.1.el10_0]" date="1761393600">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123288]
- KVM: arm64: Disable MPAM visibility by default and ignore VMM writes (Gavin Shan) [RHEL-121690]
- KVM: arm64: Add a macro for creating filtered sys_reg_descs entries (Gavin Shan) [RHEL-121690]
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119147] {CVE-2025-39881}
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116388] {CVE-2025-39702}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-55.41.1.el10_0]" date="1760961600">- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114853] {CVE-2025-39751}
- erofs: fix blksize &lt; PAGE_SIZE for file-backed mounts (CKI Backport Bot) [RHEL-83885] {CVE-2024-56750}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114499]
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113614] {CVE-2025-39730}
- net/mlx5: Generate PPS IN event on new function for shared clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Support one PTP device per hardware clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Move PPS notifier and out_work to clock_state (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add devcom component for the clock shared by functions (Michal Schmidt) [RHEL-101997]
- net/mlx5: Change clock in mlx5_core_dev to mlx5_clock pointer (Michal Schmidt) [RHEL-101997]
- net/mlx5: Add API to get mlx5_core_dev from mlx5_clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add init and destruction functions for a single HW clock (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Change parameters for PTP internal functions (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add helper functions for PTP callbacks (Benjamin Poirier) [RHEL-101997]
- net/mlx5: Add support for MRTCQ register (Benjamin Poirier) [RHEL-101997]
- net/mlx5: use do_aux_work for PHC overflow checks (Michal Schmidt) [RHEL-101997]
- mlx5_en: use read sequence for gettimex64 (Benjamin Poirier) [RHEL-101997]
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113859] {CVE-2025-39697}
- vsock/virtio: Validate length in packet header before skb_put() (Jon Maloy) [RHEL-114304] {CVE-2025-39718}
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114863] {CVE-2025-39727}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117583] {CVE-2025-39849}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.40.1.el10_0]" date="1760184000">- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119125] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118460] {CVE-2025-39817}
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116192]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116192]
- SUNRPC: call xs_sock_process_cmsg for all cmsg (Olga Kornievskaia) [RHEL-110813]
- sunrpc: fix client side handling of tls alerts (Olga Kornievskaia) [RHEL-110813] {CVE-2025-38571}
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114447]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114447]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114430]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114430]
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114438]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114438]
- ipv6: reject malicious packets in ipv6_gso_segment() (CKI Backport Bot) [RHEL-113248] {CVE-2025-38572}
- enic: fix incorrect MTU comparison in enic_change_mtu() (John Meneghini) [RHEL-108265]
- net/enic: Allow at least 8 RQs to always be used (John Meneghini) [RHEL-108265]
- enic: get max rq &amp; wq entries supported by hw, 16K queues (John Meneghini) [RHEL-106602]
- enic: cleanup of enic wq request completion path (John Meneghini) [RHEL-106602]
- enic: added enic_wq.c and enic_wq.h (John Meneghini) [RHEL-106602]
- enic: remove unused function cq_enet_wq_desc_dec (John Meneghini) [RHEL-106602]
- enic: enable rq extended cq support (John Meneghini) [RHEL-106602]
- enic: enic rq extended cq defines (John Meneghini) [RHEL-106602]
- enic: enic rq code reorg (John Meneghini) [RHEL-106602]
- enic: Move function from header file to c file (John Meneghini) [RHEL-106602]
- enic: add dependency on Page Pool (John Meneghini) [RHEL-106602]
- enic: remove copybreak tunable (John Meneghini) [RHEL-106602]
- enic: Use the Page Pool API for RX (John Meneghini) [RHEL-106602]
- enic: Simplify RX handler function (John Meneghini) [RHEL-106602]
- enic: Move RX functions to their own file (John Meneghini) [RHEL-106602]
- enic: Fix typo in comment in table indexed by link speed (John Meneghini) [RHEL-106602]
- enic: Obtain the Link speed only after the link comes up (John Meneghini) [RHEL-106602]
- enic: Move RX coalescing set function (John Meneghini) [RHEL-106602]
- enic: Move kdump check into enic_adjust_resources() (John Meneghini) [RHEL-106602]
- enic: Move enic resource adjustments to separate function (John Meneghini) [RHEL-106602]
- enic: Adjust used MSI-X wq/rq/cq/interrupt resources in a more robust way (John Meneghini) [RHEL-106602]
- enic: Allocate arrays in enic struct based on VIC config (John Meneghini) [RHEL-106602]
- enic: Save resource counts we read from HW (John Meneghini) [RHEL-106602]
- enic: Make MSI-X I/O interrupts come after the other required ones (John Meneghini) [RHEL-106602]
- enic: Create enic_wq/rq structures to bundle per wq/rq data (John Meneghini) [RHEL-106602]
- scsi: fnic: Fix missing DMA mapping error in fnic_send_frame() (John Meneghini) [RHEL-111542]
- scsi: fnic: Set appropriate logging level for log message (John Meneghini) [RHEL-111542]
- scsi: fnic: Add and improve logs in FDMI and FDMI ABTS paths (John Meneghini) [RHEL-111542]
- scsi: fnic: Turn off FDMI ACTIVE flags on link down (John Meneghini) [RHEL-111542]
- scsi: fnic: Fix crash in fnic_wq_cmpl_handler when FDMI times out (John Meneghini) [RHEL-111542]
- scsi: fnic: Remove unnecessary spinlock locking and unlocking (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace fnic-&gt;lock_flags with local flags (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace use of sizeof with standard usage (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix indentation and remove unnecessary parenthesis (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary debug print (John Meneghini) [RHEL-111539]
- scsi: fnic: Propagate SCSI error code from fnic_scsi_drv_init() (John Meneghini) [RHEL-111539]
- scsi: fnic: Test for memory allocation failure and return error code (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code from failure of scsi drv init (John Meneghini) [RHEL-111539]
- scsi: fnic: Return appropriate error code for mem alloc failure (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove always-true IS_FNIC_FCP_INITIATOR macro (John Meneghini) [RHEL-111539]
- scsi: fnic: Fix use of uninitialized value in debug message (John Meneghini) [RHEL-111539]
- scsi: fnic: Delete incorrect debugfs error handling (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else to fix warning in FDLS FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove extern definition from .c files (John Meneghini) [RHEL-111539]
- scsi: fnic: Remove unnecessary else and unnecessary break in FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Increment driver version (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support to handle port channel RSCN (John Meneghini) [RHEL-111539]
- scsi: fnic: Code cleanup (John Meneghini) [RHEL-111539]
- scsi: fnic: Add stats and related functionality (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify fnic interfaces to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Modify IO path to use FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add functionality in fnic to support FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FIP (John Meneghini) [RHEL-111539]
- scsi: fnic: Add and integrate support for FDMI (John Meneghini) [RHEL-111539]
- scsi: fnic: Add Cisco hardware model names (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for unsolicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for target based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add support for fabric based solicited requests and responses (John Meneghini) [RHEL-111539]
- scsi: fnic: Add headers and definitions for FDLS (John Meneghini) [RHEL-111539]
- scsi: fnic: Replace shost_printk() with dev_info()/dev_err() (John Meneghini) [RHEL-111539]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111056] {CVE-2025-38614}
- mm/memory-tier: fix abstract distance calculation overflow (Rafael Aquini) [RHEL-109447]
- KVM: x86/hyper-v: Skip non-canonical addresses during PV TLB flush (CKI Backport Bot) [RHEL-104737] {CVE-2025-38351}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.39.1.el10_0]" date="1759579200">- wifi: ath12k: Decrement TID on RX peer frag setup error handling (CKI Backport Bot) [RHEL-114712] {CVE-2025-39761}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (CKI Backport Bot) [RHEL-114695] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (CKI Backport Bot) [RHEL-114695]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114695] {CVE-2025-39757}
- HID: core: Harden s32ton() against conversion to 0 bits (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: stop exporting hid_snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- HID: simplify snto32() (CKI Backport Bot) [RHEL-111037] {CVE-2025-38556}
- cxl: core/region - ignore interleave granularity when ways=1 (John W. Linville) [RHEL-107595]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-55.38.1.el10_0]" date="1759233600">- hv_netvsc: Fix panic during namespace deletion with VF (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114930]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114930]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114930]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114930]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Set VF priv_flags to IFF_NO_ADDRCONF before open to prevent IPv6 addrconf (Maxim Levitsky) [RHEL-114930]
- net: mana: Record doorbell physical address in PF mode (Maxim Levitsky) [RHEL-114930]
- net: mana: Add support for Multi Vports on Bare metal (Maxim Levitsky) [RHEL-114930]
- net: mana: Switch to page pool for jumbo frames (Maxim Levitsky) [RHEL-114930]
- net: mana: Add metadata support for xdp mode (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Handle net event for pointing to the current netdev (Maxim Levitsky) [RHEL-114930]
- net: mana: Change the function signature of mana_get_primary_netdev_rcu (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Ensure variable err is initialized (Maxim Levitsky) [RHEL-114930]
- net: mana: Add debug logs in MANA network driver (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Use VF's tso_max_size value when data path is VF (Maxim Levitsky) [RHEL-114930]
- net: mana: Allow tso_max_size to go up-to GSO_MAX_SIZE (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: request error CQEs when supported (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Query feature_flags bitmask from FW (Maxim Levitsky) [RHEL-114930]
- net: mana: Support holes in device list reply msg (Maxim Levitsky) [RHEL-114930]
- RDMA/mana_ib: Allocate PAGE aligned doorbell index (Maxim Levitsky) [RHEL-114930]
- hv_netvsc: Link queues to NAPIs (Maxim Levitsky) [RHEL-114930]
- sctp: linearize cloned gso packets in sctp_rcv (CKI Backport Bot) [RHEL-113339] {CVE-2025-38718}
- nfsd: don't ignore the return code of svc_proc_register() (Olga Kornievskaia) [RHEL-93626] {CVE-2025-22026}
- smb: client: fix session setup against servers that require SPN (Paulo Alcantara) [RHEL-107110]
- smb: client: allow parsing zero-length AV pairs (Paulo Alcantara) [RHEL-107110]
- RDMA/cxgb4: Notify rdma stack for IB_EVENT_QP_LAST_WQE_REACHED event (CKI Backport Bot) [RHEL-100817]</changelog>
</package>
<package pkgid="85a9d6cc724ad8f94324295b51b51de59ecfe4386199008682a63c0de8c588e7" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.13.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+2.1.el10_1_ciq" date="1764244801">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.13.1+1.1.el10_1_ciq" date="1764244800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.13.1" date="1763985600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.9.1.el10_1]" date="1761652800">- platform/x86/intel: power-domains: Use topology_logical_package_id() for package ID (CKI Backport Bot) [RHEL-123290]
- smb: client: fix file open check in __cifs_unlink() (Paulo Alcantara) [RHEL-122417]
- smb: client: fix data loss due to broken rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix compound alignment with encryption (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in rename(2) (Paulo Alcantara) [RHEL-122417]
- smb: client: fix race with concurrent opens in unlink(2) (Paulo Alcantara) [RHEL-122417]
- use uniform permission checks for all mount propagation changes (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- do_change_type(): refuse to operate on unmounted/not ours mounts (Ian Kent) [RHEL-121702] {CVE-2025-38498}
- cgroup/psi: Set of-&gt;priv to NULL upon file release (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- kernfs: Fix UAF in polling when open file is released (CKI Backport Bot) [RHEL-119143] {CVE-2025-39881}
- redhat: rpminspect: update emptyrpm list for kernel variants (Alexandra Hájková)
- scsi: lpfc: Fix buffer free/clear order in deferred receive path (CKI Backport Bot) [RHEL-119132] {CVE-2025-39841}
- efivarfs: Fix slab-out-of-bounds in efivarfs_d_compare (CKI Backport Bot) [RHEL-118462] {CVE-2025-39817}
- wifi: cfg80211: sme: cap SSID length in __cfg80211_connect_result() (CKI Backport Bot) [RHEL-117585] {CVE-2025-39849}
- xfs: do not propagate ENODATA disk errors into xattr code (Carlos Maiolino) [RHEL-115733]
- ipv6: sr: Fix MAC comparison to be constant-time (CKI Backport Bot) [RHEL-116387] {CVE-2025-39702}
- s390/ism: fix concurrency management in ism_cmd() (CKI Backport Bot) [RHEL-114500]
- s390/hypfs: Enable limited access during lockdown (CKI Backport Bot) [RHEL-114431]
- s390/hypfs: Avoid unnecessary ioctl registration in debugfs (CKI Backport Bot) [RHEL-114431]
- redhat/configs: Enable CONFIG_MITIGATION_VMSCAPE for x86 (Waiman Long) [RHEL-114276]
- x86/vmscape: Add old Intel CPUs to affected list (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Warn when STIBP is disabled with SMT (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/bugs: Move cpu_bugs_smt_update() down (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enable the mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Add conditional IBPB mitigation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- x86/vmscape: Enumerate VMSCAPE bug (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- Documentation/hw-vuln: Add VMSCAPE documentation (Waiman Long) [RHEL-114276] {CVE-2025-40300}
- RDMA/mana_ib: Fix DSCP value in modify QP (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle Reset Request from MANA NIC (Maxim Levitsky) [RHEL-114931]
- net: mana: Set tx_packets to post gso processing packet count (Maxim Levitsky) [RHEL-114931]
- net: mana: Handle unsupported HWC commands (Maxim Levitsky) [RHEL-114931]
- net: mana: Add handler for hardware servicing events (Maxim Levitsky) [RHEL-114931]
- net: mana: Expose additional hardware counters for drop and TC via ethtool. (Maxim Levitsky) [RHEL-114931]
- mm: swap: fix potential buffer overflow in setup_clusters() (CKI Backport Bot) [RHEL-114862] {CVE-2025-39727}
- ALSA: hda/ca0132: Fix buffer overflow in add_tuning_control (CKI Backport Bot) [RHEL-114852] {CVE-2025-39751}
- ALSA: usb-audio: Validate UAC3 power domain descriptors, too (Jaroslav Kysela) [RHEL-114693] {CVE-2025-38729}
- ALSA: usb-audio: Fix size validation in convert_chmap_v3() (Jaroslav Kysela) [RHEL-114693]
- ALSA: usb-audio: Validate UAC3 cluster segment descriptors (CKI Backport Bot) [RHEL-114693] {CVE-2025-39757}
- ibmvnic: Use ndo_get_stats64 to fix inaccurate SAR reporting (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Fix hardcoded NUM_RX_STATS/NUM_TX_STATS with dynamic sizeof (Mamatha Inamdar) [RHEL-114439]
- ibmvnic: Add stat for tx direct vs tx batched (Mamatha Inamdar) [RHEL-114439]
- vsock/virtio: Validate length in packet header before skb_put() (CKI Backport Bot) [RHEL-114301] {CVE-2025-39718}
- NFS: Fix a race when updating an existing write (CKI Backport Bot) [RHEL-113861] {CVE-2025-39697}</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.8.1.el10_1]" date="1760702400">- redhat: revert to using redhatsecureboot504 for RHEL UKI (Vitaly Kuznetsov) [RHEL-122226]</changelog>
  <changelog author="Jan Stancek &lt;jstancek@redhat.com&gt; [6.12.0-124.7.1.el10_1]" date="1759924800">- drm/amdgpu: Include sdma_4_4_4.bin (Peter Colberg) [RHEL-117567]</changelog>
</package>
<package pkgid="7b337283f58bcbfb34feac5e81e18c532f35f8e4b444be0dc53b3728cba4497f" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.16.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+2.1.el10_1_ciq" date="1765281601">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.16.1+1.1.el10_1_ciq" date="1765281600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.16.1" date="1764763200">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.13.1.el10_1]" date="1763035200">- NFSv4: handle ERR_GRACE on delegation recalls (Olga Kornievskaia) [RHEL-127623]
- nfsd: nfserr_jukebox in nlm_fopen should lead to a retry (Olga Kornievskaia) [RHEL-127623]
- Revert "SUNRPC: Don't allow waiting for exiting tasks" (Scott Mayhew) [RHEL-110051]
- smb: client: get rid of d_drop() in cifs_do_rename() (Paulo Alcantara) [RHEL-124955]
- smb: client: fix wrong index reference in smb2_compound_op() (Paulo Alcantara) [RHEL-124955]
- smb: client: handle unlink(2) of files open by different clients (Paulo Alcantara) [RHEL-124955]
- smb: client: fix filename matching of deferred files (Paulo Alcantara) [RHEL-124955]
- fs/smb: Fix inconsistent refcnt update (Paulo Alcantara) [RHEL-124955] {CVE-2025-39819}
- ice: don't leave device non-functional if Tx scheduler config fails (Petr Oros) [RHEL-116535]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.12.1.el10_1]" date="1762862400">- tcp: Don't call reqsk_fastopen_remove() in tcp_conn_request(). (Antoine Tenart) [RHEL-120672]
- tcp: Clear tcp_sk(sk)-&gt;fastopen_rsk in tcp_disconnect(). (Antoine Tenart) [RHEL-120672] {CVE-2025-39955}
- NFS: Fix filehandle bounds checking in nfs_fh_to_dentry() (CKI Backport Bot) [RHEL-113613] {CVE-2025-39730}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.11.1.el10_1]" date="1762430400">- of_numa: fix uninitialized memory nodes causing kernel panic (Charles Mirabile) [RHEL-123154] {CVE-2025-39903}
- redhat: use the same cert as UKI's to sign addons (Li Tian) [RHEL-124734]
- ibmveth: Add multi buffers rx replenishment hcall support (Mamatha Inamdar) [RHEL-116193]
- net: ibmveth: Reset the adapter when unexpected states are detected (Mamatha Inamdar) [RHEL-116193]
- ibmvnic: Increase max subcrq indirect entries with fallback (Mamatha Inamdar) [RHEL-116189]
- redhat: enable TDX host config (Paolo Bonzini) [RHEL-27145]
- KVM/TDX: Explicitly do WBINVD when no more TDX SEAMCALLs (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Update the kexec section in the TDX documentation (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Remove the !KEXEC_CORE dependency (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable kexec/kdump on platforms with TDX partial write erratum (Paolo Bonzini) [RHEL-27145]
- x86/virt/tdx: Mark memory cache state incoherent when making SEAMCALL (Paolo Bonzini) [RHEL-27145]
- x86/sme: Use percpu boolean to control WBINVD during kexec (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Consolidate relocate_kernel() function parameters (Paolo Bonzini) [RHEL-27145]
- x86/paravirt: Remove the WBINVD callback (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use typedef for relocate_kernel_fn function prototype (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Cope with relocate_kernel() not being at the start of the page (Paolo Bonzini) [RHEL-27145]
- kexec_core: Add and update comments regarding the KEXEC_JUMP flow (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark machine_kexec() with __nocfi (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix location of relocate_kernel with -ffunction-sections (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Fix stack and handling of re-entry point for ::preserve_context (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use correct swap page in swap_pages function (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Ensure preserve_context flag is set on return to kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Disable global pages before writing to control page (Paolo Bonzini) [RHEL-27145]
- x86: Fix build regression with CONFIG_KEXEC_JUMP enabled (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Mark relocate_kernel page as ROX instead of RWX (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up register usage in relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Eliminate writes through kernel mapping of relocate_kernel page (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Drop page_list argument from relocate_kernel() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Add data section to relocate_kernel (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Move relocate_kernel to kernel .data section (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Invoke copy of relocate_kernel() instead of the original (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Copy control page into place in machine_kexec_prepare() (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Allocate PGD for x86_64 transition page tables separately (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Only swap pages for ::preserve_context mode (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Use named labels in swap_pages in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Clean up and document register use in relocate_kernel_64.S (Paolo Bonzini) [RHEL-27145]
- x86/kexec: Restore GDT on return from ::preserve_context kexec (Paolo Bonzini) [RHEL-27145]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.10.1.el10_1]" date="1761998400">- wifi: cfg80211: fix use-after-free in cmp_bss() (CKI Backport Bot) [RHEL-122880] {CVE-2025-39864}
- selftests: tls: test skb copy under mem pressure and OOB (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- tls: make sure to abort the stream if headers are bogus (CKI Backport Bot) [RHEL-120380] {CVE-2025-39946}
- ixgbe: fix ixgbe_orom_civd_info struct layout (Michal Schmidt) [RHEL-119079]
- ice: fix Rx page leak on multi-buffer frames (Petr Oros) [RHEL-116543]
- eventpoll: Fix semi-unbounded recursion (CKI Backport Bot) [RHEL-111055] {CVE-2025-38614}</changelog>
</package>
<package pkgid="1ca0066487df0e7885ef474486ba45be9bcac75d401e66cc53f176834e8ef0b2" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.20.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+2.1.el10_1_ciq" date="1765886401">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.20.1+1.1.el10_1_ciq" date="1765886400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.20.1" date="1765454400">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.14.1.el10_1]" date="1763553600">- ublk: make sure ubq-&gt;canceling is set when queue is frozen (Ming Lei) [RHEL-99436] {CVE-2025-22068}
- e1000e: fix heap overflow in e1000_set_eeprom (Corinna Vinschen) [RHEL-123127] {CVE-2025-39898}
- i40e: add mask to apply valid bits for itr_idx (Michal Schmidt) [RHEL-123811]
- i40e: add max boundary check for VF filters (Michal Schmidt) [RHEL-123811] {CVE-2025-39968}
- i40e: fix validation of VF state in get resources (Michal Schmidt) [RHEL-123811] {CVE-2025-39969}
- i40e: fix input validation logic for action_meta (Michal Schmidt) [RHEL-123811] {CVE-2025-39970}
- i40e: fix idx validation in config queues msg (Michal Schmidt) [RHEL-123811] {CVE-2025-39971}
- i40e: fix idx validation in i40e_validate_queue_map (Michal Schmidt) [RHEL-123811] {CVE-2025-39972}
- i40e: add validation for ring_len param (Michal Schmidt) [RHEL-123811] {CVE-2025-39973}
- nvme-multipath: Skip nr_active increments in RETRY disposition (Ewan D. Milne) [RHEL-123689]</changelog>
</package>
<package pkgid="98bfb92139fecb8a5886f603810d3725ae0e26d2753e501d9e550c5cf43fd664" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.21.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+2.1.el10_1_ciq" date="1766491201">- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.21.1+1.1.el10_1_ciq" date="1766491200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.21.1" date="1766145600">- Porting to Rocky Linux 10, debranding and Rocky Linux branding
- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.20.1.el10_1]" date="1764676800">- iommu/vt-d: Disallow dirty tracking if incoherent page walk (CKI Backport Bot) [RHEL-125482] {CVE-2025-40058}
- net/mlx5: fs, fix UAF in flow counter release (Michal Schmidt) [RHEL-124432] {CVE-2025-39979}
- dpll: zl3073x: Fix output pin registration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Handle missing or corrupted flash configuration (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Refactor DPLL initialization (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: ZL3073X_I2C and ZL3073X_SPI should depend on NET (Ivan Vecera) [RHEL-114795]
- dpll: Make ZL3073X invisible (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fix build failure (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_ZL3073X* (Ivan Vecera) [RHEL-114795]
- redhat/configs: enable CONFIG_I2C_MUX_PCA954x on x86 (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get fractional frequency offset (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to adjust phase (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement phase offset monitor feature (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get phase offset on connected input pin (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set esync on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set frequency on pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin state setting in automatic mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Add support to get/set priority on input pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Implement input pin selection in manual mode (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Register DPLL devices and pins (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Read DPLL types and pin properties from system firmware (Ivan Vecera) [RHEL-114795]
- dpll: zl3073x: Fetch invariants during probe (Ivan Vecera) [RHEL-114795]
- dpll: Add basic Microchip ZL3073x support (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add support for Microchip Azurite chip family (Ivan Vecera) [RHEL-114795]
- dt-bindings: dpll: Add DPLL device and pin (Ivan Vecera) [RHEL-114795]
- idpf: set mac type when adding and removing MAC filters (CKI Backport Bot) [RHEL-123372]
- crypto: ccp - Always pass in an error pointer to __sev_platform_shutdown_locked() (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix SNP panic notifier unregistration (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix dereferencing uninitialized error pointer (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Fix __sev_snp_shutdown_locked (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move SEV/SNP Platform initialization to KVM (Lenny Szubowicz) [RHEL-76557]
- KVM: SVM: Add support to initialize SEV/SNP functionality in KVM (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Add new SEV/SNP platform shutdown API (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Register SNP panic notifier only if SNP is enabled (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Reset TMR size at SNP Shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Ensure implicit SEV/SNP init and shutdown in ioctls (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Move dev_info/err messages for SEV/SNP init and shutdown (Lenny Szubowicz) [RHEL-76557]
- crypto: ccp - Abort doing SEV INIT if SNP INIT fails (Lenny Szubowicz) [RHEL-76557]
- s390/pci: Do not try re-enabling load/store if device is disabled (CKI Backport Bot) [RHEL-114448]
- s390/pci: Fix stale function handles in error handling (CKI Backport Bot) [RHEL-114448]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.19.1.el10_1]" date="1764417600">- Bluetooth: MGMT: fix crash in set_mesh_sync and set_mesh_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix sparse errors (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix possible UAFs (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_sync: fix set_local_name race condition (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: set_mesh: update LE scan interval and window (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Protect mgmt_pending list with its own lock (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: MGMT: Fix UAF on mgmt_remove_adv_monitor_complete (CKI Backport Bot) [RHEL-122901] {CVE-2025-39981}
- Bluetooth: hci_event: Fix UAF in hci_conn_tx_dequeue (CKI Backport Bot) [RHEL-124134] {CVE-2025-39983}
- can: j1939: add missing calls in NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- can: j1939: implement NETDEV_UNREGISTER notification handler (CKI Backport Bot) [RHEL-124110] {CVE-2025-39925}
- Bluetooth: hci_event: Fix UAF in hci_acl_create_conn_sync (CKI Backport Bot) [RHEL-123824] {CVE-2025-39982}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.18.1.el10_1]" date="1764244800">- ice: ice_adapter: release xa entry on adapter allocation failure (CKI Backport Bot) [RHEL-128472] {CVE-2025-40185}
- cifs: Fix oops due to uninitialised variable (CKI Backport Bot) [RHEL-120562] {CVE-2025-38737}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.17.1.el10_1]" date="1764072000">- x86/hyperv: Fix kdump on Azure CVMs (Li Tian) [RHEL-129777]
- tunnels: reset the GSO metadata before reusing the skb (Antoine Tenart) [RHEL-113919]
- io_uring/waitid: always prune wait queue entry in io_waitid_wait() (CKI Backport Bot) [RHEL-124974] {CVE-2025-40047}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.16.1.el10_1]" date="1763812800">- bpf: Fix metadata_dst leak __bpf_redirect_neigh_v{4,6} (Xin Long) [RHEL-125759]
- mm/memory-failure: fix VM_BUG_ON_PAGE(PagePoisoned(page)) when unpoison memory (CKI Backport Bot) [RHEL-119161] {CVE-2025-39883}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.15.1.el10_1]" date="1763640000">- nfsd: handle get_client_locked() failure in nfsd4_setclientid_confirm() (CKI Backport Bot) [RHEL-125623] {CVE-2025-38724}
- wifi: mt76: free pending offchannel tx frames on wcid cleanup (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: do not add non-sta wcid entries to the poll list (Jose Ignacio Tornos Martinez) [RHEL-123070]
- wifi: mt76: fix linked list corruption (Jose Ignacio Tornos Martinez) [RHEL-123070] {CVE-2025-39918}</changelog>
</package>
<package pkgid="3e5d534c2fad1880560dea4b72e8520b049fbd2938f7ff30b6a4c337e88d33ec" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.27.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+2.1.el10_1_ciq" date="1768996801">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.27.1+1.1.el10_1_ciq" date="1768996800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.27.1" date="1768478400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.21.1.el10_1]" date="1764849600">- CVE-2025-38499 kernel: clone_private_mnt(): make sure that caller has CAP_SYS_ADMIN in the right userns (Abhi Das) [RHEL-129282] {CVE-2025-38499}
- net: tun: Update napi-&gt;skb after XDP process (CKI Backport Bot) [RHEL-122247] {CVE-2025-39984}</changelog>
</package>
<package pkgid="3b6ed03c5582d19af3bebb56ad83839309c18bbaaab29f79beab65528d0edfad" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.28.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+2.1.el10_1_ciq" date="1769774401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.28.1+1.1.el10_1_ciq" date="1769774400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.28.1" date="1768996800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.22.1.el10_1]" date="1765108800">- ASoC: Intel: sof_sdw: Add quirks for Lenovo P1 and P16 (CKI Backport Bot) [RHEL-130550]
- tls: wait for pending async decryptions if tls_strp_msg_hold fails (CKI Backport Bot) [RHEL-128866] {CVE-2025-40176}
- sched/deadline: Fix RT task potential starvation when expiry time passed (CKI Backport Bot) [RHEL-124660]</changelog>
</package>
<package pkgid="a6cd62e9f0eb521fa1f0971022d8edb1c137a1aba226eb9c06a65b48680e4c0a" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.29.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+2.1.el10_1_ciq" date="1770206401">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.29.1+1.1.el10_1_ciq" date="1770206400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.29.1" date="1769688000">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.24.1.el10_1]" date="1765886400">- audit: fix out-of-bounds read in audit_compare_dname_path() (Richard Guy Briggs) [RHEL-119185] {CVE-2025-39840}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.23.1.el10_1]" date="1765627200">- redhat: use RELEASE_LOCALVERSION also for dist-get-tag (Jan Stancek)
- redhat: introduce RELEASE_LOCALVERSION variable (Jan Stancek)
- iommufd: Fix race during abort for file descriptors (Eder Zulian) [RHEL-123789] {CVE-2025-39966}
- smb: client: handle lack of IPC in dfs_cache_refresh() (Paulo Alcantara) [RHEL-126227]
- mm: slub: avoid wake up kswapd in set_track_prepare (Audra Mitchell) [RHEL-125522] {CVE-2025-39843}
- dpll: zl3073x: Increase maximum size of flash utility (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Fix double free in zl3073x_devlink_flash_update() (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Implement devlink flash callback (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add firmware loading functionality (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add low-level flash functions (Ivan Vecera) [RHEL-116157]
- dpll: zl3073x: Add functions to access hardware registers (Ivan Vecera) [RHEL-116157]</changelog>
</package>
<package pkgid="d0c079de157a628a1aca6277567d2fe9e38645dc0af7dd7e4f45f8d76625e8ba" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.31.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+2.1.el10_1_ciq" date="1770897601">- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.31.1+1.1.el10_1_ciq" date="1770897600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.31.1" date="1770379200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.28.1.el10_1]" date="1767787200">- libceph: fix potential use-after-free in have_mon_and_osd_map() (CKI Backport Bot) [RHEL-137403] {CVE-2025-68285}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.27.1.el10_1]" date="1766836800">- arm64: errata: Expand speculative SSBS workaround for Cortex-A720AE (Waiman Long) [RHEL-120684]
- arm64: cputype: Add Cortex-A720AE definitions (Waiman Long) [RHEL-120684]
- arm64: errata: Add missing sentinels to Spectre-BHB MIDR arrays (Waiman Long) [RHEL-120684]
- arm64: Add support for HIP09 Spectre-BHB mitigation (Waiman Long) [RHEL-120684]
- arm64: errata: Add newer ARM cores to the spectre_bhb_loop_affected() lists (Waiman Long) [RHEL-120684]
- arm64: cputype: Add MIDR_CORTEX_A76AE (Waiman Long) [RHEL-120684]
- arm64: errata: Add KRYO 2XX/3XX/4XX silver cores to Spectre BHB safe list (Waiman Long) [RHEL-120684]
- kmem/tracing: add kmem name to kmem_cache_alloc tracepoint (Charles Haithcock) [RHEL-129882]
- mm: memory-tiering: fix PGPROMOTE_CANDIDATE counting (Rafael Aquini) [RHEL-128383]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.26.1.el10_1]" date="1766491200">- usb: dwc3: Fix race condition between concurrent dwc3_remove_requests() call paths (CKI Backport Bot) [RHEL-137150] {CVE-2025-68287}
- drm/vmwgfx: Validate command header size against SVGA_CMD_MAX_DATASIZE (CKI Backport Bot) [RHEL-134431] {CVE-2025-40277}
- net: phylink: add lock for serializing concurrent pl-&gt;phydev writes with resolver (CKI Backport Bot) [RHEL-129812] {CVE-2025-39905}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.25.1.el10_1]" date="1766232000">- sctp: avoid NULL dereference when chunk data buffer is missing (CKI Backport Bot) [RHEL-134010] {CVE-2025-40240}
- HID: i2c-hid: Resolve touchpad issues on Dell systems during S4 (CKI Backport Bot) [RHEL-128281]
- HID: multitouch: fix slab out-of-bounds access in mt_report_fixup() (CKI Backport Bot) [RHEL-124610] {CVE-2025-39806}
- inetpeer: do not get a refcount in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: update inetpeer timestamp in inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer() (Guillaume Nault) [RHEL-115287]
- inetpeer: remove create argument of inet_getpeer_v[46]() (Guillaume Nault) [RHEL-115287]</changelog>
</package>
<package pkgid="d2f68d46d40e55ce46f523741c4d668d70d93c4317071897cac671be366ba0a5" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.35.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+2.1.el10_1_ciq" date="1771502401">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.35.1+1.1.el10_1_ciq" date="1771502400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.35.1" date="1770897600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.31.1.el10_1]" date="1769083200">- i40e: support generic devlink param "max_mac_per_vf" (Mohammad Heib) [RHEL-121647]
- devlink: Add new "max_mac_per_vf" generic device param (Mohammad Heib) [RHEL-121647]
- i40e: improve VF MAC filters accounting (Mohammad Heib) [RHEL-121647]
- KVM: arm64: Hide ID_AA64MMFR2_EL1.NV from guest and userspace (Donald Dutile) [RHEL-134763]
- scsi: st: Skip buffer flush for information ioctls (Ewan D. Milne) [RHEL-136289]
- scsi: st: Separate st-unique ioctl handling from SCSI common ioctl handling (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't set pos_unknown just after device recognition (Ewan D. Milne) [RHEL-136289]
- scsi: st: New session only when Unit Attention for new tape (Ewan D. Milne) [RHEL-136289]
- scsi: st: Add MTIOCGET and MTLOAD to ioctls allowed after device reset (Ewan D. Milne) [RHEL-136289]
- scsi: st: Don't modify unknown block number in MTIOCGET (Ewan D. Milne) [RHEL-136289]
- xfs: rework datasync tracking and execution (CKI Backport Bot) [RHEL-126599]
- xfs: rearrange code in xfs_inode_item_precommit (CKI Backport Bot) [RHEL-126599]
- s390: Disable ARCH_WANT_OPTIMIZE_HUGETLB_VMEMMAP (Luiz Capitulino) [RHEL-133336]
- s390: mm: add stub for hugetlb_optimize_vmemmap_key (Luiz Capitulino) [RHEL-133336]
- x86/mm/init: Handle the special case of device private pages in add_pages(), to not increase max_pfn and trigger dma_addressing_limited() bounce buffers (Ricardo Robaina) [RHEL-129452]
- x86/kaslr: Reduce KASLR entropy on most x86 systems (Ricardo Robaina) [RHEL-129452]
- x86/boot/compressed: Remove unused header includes from kaslr.c (Ricardo Robaina) [RHEL-129452]
- RDMA/core: Fix "KASAN: slab-use-after-free Read in ib_register_device" problem (CKI Backport Bot) [RHEL-134363] {CVE-2025-38022}
- uprobes: Fix race in uprobe_free_utask (Jay Shin) [RHEL-133456]
- ASoC: Intel: bytcr_rt5640: Fix invalid quirk input mapping (CKI Backport Bot) [RHEL-129115] {CVE-2025-40154}
- kabi: stabilize struct alt_instr (Čestmír Kalina) [RHEL-122759]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.30.1.el10_1]" date="1768996800">- io_uring/msg_ring: ensure io_kiocb freeing is deferred for RCU (Jeff Moyer) [RHEL-129623] {CVE-2025-38453}
- net: atlantic: fix fragment overflow handling in RX path (CKI Backport Bot) [RHEL-139490] {CVE-2025-68301}
- Bluetooth: hci_sock: Prevent race in socket write iter and sock bind (CKI Backport Bot) [RHEL-139465] {CVE-2025-68305}
- vsock: Ignore signal/timeout on connect() if already established (CKI Backport Bot) [RHEL-139287] {CVE-2025-40248}
- net: use dst_dev_rcu() in sk_setup_caps() (Hangbin Liu) [RHEL-129087] {CVE-2025-40170}
- ipv6: use RCU in ip6_xmit() (Hangbin Liu) [RHEL-129026] {CVE-2025-40135}
- ipv6: use RCU in ip6_output() (Hangbin Liu) [RHEL-128991] {CVE-2025-40158}
- net: dst: introduce dst-&gt;dev_rcu (Hangbin Liu) [RHEL-129026]
- net: Add locking to protect skb-&gt;dev access in ip_output (Hangbin Liu) [RHEL-129026]
- net: dst: add four helpers to annotate data-races around dst-&gt;dev (Hangbin Liu) [RHEL-129026]
- eventpoll: don't decrement ep refcount while still holding the ep mutex (CKI Backport Bot) [RHEL-138041] {CVE-2025-38349}
- fs/proc: fix uaf in proc_readdir_de() (CKI Backport Bot) [RHEL-137101] {CVE-2025-40271}
- Bluetooth: MGMT: Fix OOB access in parse_adv_monitor_pattern() (CKI Backport Bot) [RHEL-136972] {CVE-2025-40294}
- Bluetooth: hci_event: validate skb length for unknown CC opcode (CKI Backport Bot) [RHEL-136951] {CVE-2025-40301}
- net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing (CKI Backport Bot) [RHEL-136836] {CVE-2025-38568}
- Bluetooth: hci_sync: fix race in hci_cmd_sync_dequeue_once (CKI Backport Bot) [RHEL-136259] {CVE-2025-40318}
- devlink: rate: Unset parent pointer in devl_rate_nodes_destroy (CKI Backport Bot) [RHEL-134926] {CVE-2025-40251}
- mptcp: fix race condition in mptcp_schedule_work() (CKI Backport Bot) [RHEL-134451] {CVE-2025-40258}
- irqchip/gic-v2m: Prevent use after free of gicv2m_get_fwnode() (CKI Backport Bot) [RHEL-131989] {CVE-2025-37819}
- drm/xe: Fix vm_bind_ioctl double free bug (Anusha Srivatsa) [RHEL-122312] {CVE-2025-38731}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.29.1.el10_1]" date="1768046400">- gitlab-ci: use rhel10.1 builder image (Michael Hofmann)
- mm/vmalloc: fix data race in show_numa_info() (Waiman Long) [RHEL-137997] {CVE-2025-38383}
- vmalloc: use for_each_vmap_node() in purge-vmap-area (Waiman Long) [RHEL-137997]
- vmalloc: switch to for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- vmalloc: add for_each_vmap_node() helper (Waiman Long) [RHEL-137997]
- smb: client: fix refcount leak in smb2_set_path_attr (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential UAF in smb2_close_cached_fid() (Paulo Alcantara) [RHEL-128581]
- smb: client: fix potential cfid UAF in smb2_query_info_compound (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix refcount leak for cifs_sb_tlink (Paulo Alcantara) [RHEL-128581]
- cifs: parse_dfs_referrals: prevent oob on malformed input (Paulo Alcantara) [RHEL-128581]
- smb: client: remove cfids_invalidation_worker (Paulo Alcantara) [RHEL-128581]
- smb client: fix bug with newly created file in cached dir (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit negative lookups when parent dir is fully cached (Paulo Alcantara) [RHEL-128581]
- smb: client: short-circuit in open_cached_dir_by_dentry() if !dentry (Paulo Alcantara) [RHEL-128581]
- smb: client: remove pointless cfid-&gt;has_lease check (Paulo Alcantara) [RHEL-128581]
- smb: client: remove unused fid_lock (Paulo Alcantara) [RHEL-128581]
- smb: client: update cfid-&gt;last_access_time in open_cached_dir_by_dentry() (Paulo Alcantara) [RHEL-128581]
- smb: client: ensure open_cached_dir_by_dentry() only returns valid cfid (Paulo Alcantara) [RHEL-128581]
- smb: client: account smb directory cache usage and per-tcon totals (Paulo Alcantara) [RHEL-128581]
- smb: client: add drop_dir_cache module parameter to invalidate cached dirents (Paulo Alcantara) [RHEL-128581]
- smb: client: show lease state as R/H/W (or NONE) in open_files (Paulo Alcantara) [RHEL-128581]
- smb: client: show negotiated cipher in DebugData (Paulo Alcantara) [RHEL-128581]
- smb: client: add new tracepoint to trace lease break notification (Paulo Alcantara) [RHEL-128581]
- smb: client: Fix NULL pointer dereference in cifs_debug_dirs_proc_show() (Paulo Alcantara) [RHEL-128581]
- coredump: Only sort VMAs when core_sort_vma sysctl is set (Herton R. Krzesinski) [RHEL-113364]</changelog>
</package>
<package pkgid="c81197b27345b924f567ba58f1669791f9452bcd83f8796a868602f077c3d63f" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.38.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+2.1.el10_1_ciq" date="1772020801">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.38.1+1.1.el10_1_ciq" date="1772020800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.38.1" date="1771588800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
  <changelog author="Julio Faracco &lt;jfaracco@redhat.com&gt; [6.12.0-124.33.1.el10_1]" date="1769515200">- io_uring/net: commit partial buffers on retry (Jeff Moyer) [RHEL-137333] {CVE-2025-38730}
- smb: client: let recv_done verify data_offset, data_length and remaining_data_length (Paulo Alcantara) [RHEL-131394] {CVE-2025-39933}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.32.1.el10_1]" date="1769256000">- squashfs: fix memory leak in squashfs_fill_super (Abhi Das) [RHEL-138024] {CVE-2025-38415}
- Squashfs: check return result of sb_min_blocksize (CKI Backport Bot) [RHEL-138024] {CVE-2025-38415}
- fbdev: Add bounds checking in bit_putcs to fix vmalloc-out-of-bounds (CKI Backport Bot) [RHEL-137686] {CVE-2025-40304}
- fbdev: bitblit: bound-check glyph index in bit_putcs* (CKI Backport Bot) [RHEL-136945] {CVE-2025-40322}</changelog>
</package>
<package pkgid="6f4aa7abb1059f5f6a4ae5bc3a85fd28fa2711b992196b2ab50e5108c823b01c" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.40.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+2.1.el10_1_ciq" date="1772625601">- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.40.1+1.1.el10_1_ciq" date="1772625600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.40.1" date="1772452800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.38.1.el10_1]" date="1770465600">- scsi: storvsc: Process unsupported MODE_SENSE_10 (Li Tian) [RHEL-147288]
- nvme-tcp: fix NULL pointer dereferences in nvmet_tcp_build_pdu_iovec (CKI Backport Bot) [RHEL-144335] {CVE-2026-22998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.37.1.el10_1]" date="1770292800">- i40e: avoid redundant VF link state updates (CKI Backport Bot) [RHEL-141876]
- bpf: Do not audit capability check in do_jit() (Jay Shin) [RHEL-135138]
- smc: Fix use-after-free in __pnet_find_base_ndev(). (Mete Durlu) [RHEL-126896] {CVE-2025-40064}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.36.1.el10_1]" date="1770120000">- NFSv4/pNFS: Clear NFS_INO_LAYOUTCOMMIT in pnfs_mark_layout_stateid_invalid (CKI Backport Bot) [RHEL-140263] {CVE-2025-68349}
- ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans (Myron Stowe) [RHEL-132908] {CVE-2023-53034}
- erofs: avoid using multiple devices with different type (CKI Backport Bot) [RHEL-137977] {CVE-2025-38172}
- ALSA: usb-audio: Fix potential overflow of PCM transfer buffer (CKI Backport Bot) [RHEL-136912] {CVE-2025-40269}
- Bluetooth: ISO: Fix possible UAF on iso_conn_free (CKI Backport Bot) [RHEL-128899] {CVE-2025-40141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.35.1.el10_1]" date="1769860800">- ice: Fix kernel panic due to page refcount underflow (CKI Backport Bot) [RHEL-139734]
- mptcp: Use __sk_dst_get() and dst_dev_rcu() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044] {CVE-2025-40133}
- mptcp: Call dst_release() in mptcp_active_enable(). (Davide Caratti) [RHEL-129044]
- vsock/vmci: Clear the vmci transport packet properly when initializing it (CKI Backport Bot) [RHEL-137703] {CVE-2025-38403}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.34.1.el10_1]" date="1769688000">- ice: prevent NULL deref in ice_lag_move_new_vf_nodes() (Michal Schmidt) [RHEL-143255]
- svcrdma: use rc_pageoff for memcpy byte offset (CKI Backport Bot) [RHEL-142793] {CVE-2025-68811}
- exec: Make sure task-&gt;comm is always NUL-terminated (Luiz Capitulino) [RHEL-141711]
- lib/buildid: use __kernel_read() for sleepable context (Waiman Long) [RHEL-141229]
- net: bonding: update the slave array for broadcast mode (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor netlink option (Hangbin Liu) [RHEL-138325]
- net: bonding: add broadcast_neighbor option for 802.3ad (Hangbin Liu) [RHEL-138325]</changelog>
</package>
<package pkgid="2f6b41ecba46d7b85eb109bf2a5ac3effe5d989a1141e948f1045b5e062aafd4" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.45.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+2.1.el10_1_ciq" date="1774526401">- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.45.1+1.1.el10_1_ciq" date="1774526400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.45.1" date="1773921600">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.42.1.el10_1]" date="1772280000">- dpll: zl3073x: Fix ref frequency setting (Ivan Vecera) [RHEL-139828]
- dpll: Prevent duplicate registrations (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Remove unused dev wrappers (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all output properties in zl3073x_out (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache all reference properties in zl3073x_ref (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Cache reference monitor status (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Split ref, out, and synth logic from core (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Store raw register values instead of parsed state (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: fix kernel-doc name and missing parameter in fw.c (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Specify phase adjustment granularity for pins (Ivan Vecera) [RHEL-139828]
- dpll: add phase-adjust-gran pin attribute (Ivan Vecera) [RHEL-139828]
- dpll: fix device-id-get and pin-id-get to return errors properly (Ivan Vecera) [RHEL-139828]
- dpll: spec: add missing module-name and clock-id to pin-get reply (Ivan Vecera) [RHEL-139828]
- dpll: zl3073x: Allow to configure phase offset averaging factor (Ivan Vecera) [RHEL-139828]
- dpll: add phase_offset_avg_factor_get/set callback ops (Ivan Vecera) [RHEL-139828]
- dpll: add phase-offset-avg-factor device attribute to netlink spec (Ivan Vecera) [RHEL-139828]
- dpll: fix clock quality level reporting (Ivan Vecera) [RHEL-139828]
- dpll: add reference sync get/set (Ivan Vecera) [RHEL-139828]
- dpll: add reference-sync netlink attribute (Ivan Vecera) [RHEL-139828]
- dpll: remove documentation of rclk_dev_name (Ivan Vecera) [RHEL-139828]
- ipv6: BUG() in pskb_expand_head() as part of calipso_skbuff_setattr() (CKI Backport Bot) [RHEL-143548] {CVE-2025-71085}
- usb: core: config: Prevent OOB read in SS endpoint companion parsing (CKI Backport Bot) [RHEL-137370] {CVE-2025-39760}
- sched_ext: Fix scx_kick_pseqs corruption on concurrent scheduler loads (Phil Auld) [RHEL-124637]
- sched_ext: Allocate scx_kick_cpus_pnt_seqs lazily using kvzalloc() (Phil Auld) [RHEL-124637]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.41.1.el10_1]" date="1772107200">- vfs: check dentry is still valid in get_link() (Ian Kent) [RHEL-134853]
- efivarfs: fix error propagation in efivar_entry_get() (CKI Backport Bot) [RHEL-150116] {CVE-2026-23156}
- KVM: x86: Apply runtime updates to current CPUID during KVM_SET_CPUID{,2} (Igor Mammedov) [RHEL-148458]
- printk: Use console_is_usable on console_unblank (CKI Backport Bot) [RHEL-148303]
- printk: Avoid irq_work for printk_deferred() on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Avoid scheduling irq_work on suspend (CKI Backport Bot) [RHEL-148303]
- printk: Allow printk_trigger_flush() to flush all types (CKI Backport Bot) [RHEL-148303]
- printk: Check CON_SUSPEND when unblanking a console (CKI Backport Bot) [RHEL-148303]
- printk: nbcon: Allow reacquire during panic (CKI Backport Bot) [RHEL-148303]
- migrate: correct lock ordering for hugetlb file folios (Luiz Capitulino) [RHEL-147270] {CVE-2026-23097}
- io_uring/sqpoll: don't put task_struct on tctx setup failure (Jeff Moyer) [RHEL-137992]
- io_uring: consistently use rcu semantics with sqpoll thread (Jeff Moyer) [RHEL-137992]
- io_uring: fix use-after-free of sq-&gt;thread in __io_uring_show_fdinfo() (Jeff Moyer) [RHEL-137992] {CVE-2025-38106}
- io_uring/sqpoll: fix sqpoll error handling races (Jeff Moyer) [RHEL-137992]
- gpio: cdev: Fix resource leaks on errors in lineinfo_changed_notify() (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- gpio: cdev: make sure the cdev fd is still active before emitting events (CKI Backport Bot) [RHEL-145597] {CVE-2025-40249}
- macvlan: fix possible UAF in macvlan_forward_source() (CKI Backport Bot) [RHEL-144128] {CVE-2026-23001}
- dm: use READ_ONCE in dm_blk_report_zones (Benjamin Marzinski) [RHEL-137953]
- dm: fix unlocked test for dm_suspended_md (Benjamin Marzinski) [RHEL-137953]
- dm: fix dm_blk_report_zones (CKI Backport Bot) [RHEL-137953] {CVE-2025-38141}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.40.1.el10_1]" date="1771502400">- s390/mm: Fix __ptep_rdp() inline assembly (Mete Durlu) [RHEL-143715]
- ice: PTP: fix missing timestamps on E825 hardware (CKI Backport Bot) [RHEL-148168]
- fou: Don't allow 0 for FOU_ATTR_IPPROTO. (Xin Long) [RHEL-144984]
- tools: ynl: Specify --no-line-number in ynl-regen.sh. (Xin Long) [RHEL-144984]
- gue: Fix skb memleak with inner IP protocol 0. (Xin Long) [RHEL-144984]
- netlink: specs: fou: replace underscores with dashes in names (Xin Long) [RHEL-144984]
- redhat: enable FOU modules in kernel-modules-extra (Xin Long) [RHEL-144984]
- net/smc: Remove validation of reserved bits in CLC Decline message (CKI Backport Bot) [RHEL-143717]
- scsi: s390: zfcp: Ensure synchronous unit_add (CKI Backport Bot) [RHEL-143733]
- smb: client: Add tracepoint for krb5 auth (Paulo Alcantara) [RHEL-145511]
- smb: client: improve error message when creating SMB session (Paulo Alcantara) [RHEL-145511]
- smb: client: relax session and tcon reconnect attempts (Paulo Alcantara) [RHEL-145511]
- cifs: #include cifsglob.h before trace.h to allow structs in tracepoints (Paulo Alcantara) [RHEL-145511]
- ALSA: hda/realtek - Enable Mute LED for Lenovo platform (Jaroslav Kysela) [RHEL-141440]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.39.1.el10_1]" date="1771329600">- exfat: fix double free in delayed_free (CKI Backport Bot) [RHEL-146406] {CVE-2025-38206}
- mlxsw: spectrum_mr: Fix use-after-free when updating multicast route stats (CKI Backport Bot) [RHEL-143196] {CVE-2025-68800}
- drm/sched: Fix potential double free in drm_sched_job_add_resv_dependencies (Mika Penttilä) [RHEL-125464] {CVE-2025-40096}
- smc: Use __sk_dst_get() and dst_dev_rcu() in smc_clc_prfx_match(). (Mete Durlu) [RHEL-130020] {CVE-2025-40168}</changelog>
</package>
<package pkgid="d58bf7301ef31de1bb0f8cb046709e03e3d6f5902cd66148f9e389aaf215a5a2" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.49.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+2.1.el10_1_ciq" date="1775822401">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.49.1+1.1.el10_1_ciq" date="1775822400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.49.1" date="1775563200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.46.1.el10_1]" date="1773748800">- netfilter: nf_tables: fix use-after-free in nf_tables_addchain() (CKI Backport Bot) [RHEL-153272] {CVE-2026-23231}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.45.1.el10_1]" date="1773144000">- ipv6: Fix use-after-free in inet6_addr_del(). (CKI Backport Bot) [RHEL-144768] {CVE-2026-23010}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.44.1.el10_1]" date="1772712000">- dpll: expose fractional frequency offset in ppt (Ivan Vecera) [RHEL-146354]
- dpll: zl3073x: Implement device mode setting support (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to set working mode (Ivan Vecera) [RHEL-151824]
- dpll: add dpll_device op to get supported modes (Ivan Vecera) [RHEL-151824]
- net: vxlan: prevent NULL deref in vxlan_xmit_one (Antoine Tenart) [RHEL-133362]
- NFS: Fixup allocation flags for nfsiod's __GFP_NORETRY (Olga Kornievskaia) [RHEL-144916]
- s390/pci: Allow automatic recovery with minimal driver support (CKI Backport Bot) [RHEL-118883]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.43.1.el10_1]" date="1772539200">- HID: intel-thc-hid: intel-thc: Fix incorrect pointer arithmetic in I2C regs save (CKI Backport Bot) [RHEL-142253] {CVE-2025-39818}
- drm/xe: Make dma-fences compliant with the safe access rules (Mika Penttilä) [RHEL-122272] {CVE-2025-38703}</changelog>
</package>
<package pkgid="21793ae256d998f2844117911d4ed36ea1e6e3a731f797f292a3ec82f309b4fd" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.52.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.52.1+3.1.el10_1_ciq" date="1777636800">- crypto: algif_aead - snapshot IV for async AEAD requests (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: algif_aead - Fix minimum RX size check for decryption (Jonathan Maple) [ciqres] {CVE-2026-31431}
- crypto: authencesn - reject short ahash digests during instance creation (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Fix src offset when decrypting in-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Herbert Xu) [ciqres] {CVE-2026-31431 CVE-2026-23060.}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Herbert Xu) [ciqres] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Herbert Xu) [ciqres] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Herbert Xu) [ciqres] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Herbert Xu) [ciqres] {CVE-2026-31431}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+2.1.el10_1_ciq" date="1777291201">- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.52.1+1.1.el10_1_ciq" date="1777291200">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs, variable overrides and macro (Michael Young)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.52.1" date="1776859200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.48.1.el10_1]" date="1774526400">- ice: fix page leak for zero-size Rx descriptors (CKI Backport Bot) [RHEL-154232]
- Bluetooth: MGMT: Fix memory leak in set_ssp_complete (David Marlin) [RHEL-151786]
- Bluetooth: hci_uart: fix null-ptr-deref in hci_uart_write_work (David Marlin) [RHEL-151786]
- Bluetooth: btusb: revert use of devm_kzalloc in btusb (David Marlin) [RHEL-151786]
- Bluetooth: btusb: reorder cleanup in btusb_disconnect to avoid UAF (David Marlin) [RHEL-151786]
- net/sched: cls_u32: use skb_header_pointer_careful() (Paolo Abeni) [RHEL-150406] {CVE-2026-23204}
- net: add skb_header_pointer_careful() helper (Paolo Abeni) [RHEL-150406]
- bonding: fix use-after-free due to enslave fail after slave array update (CKI Backport Bot) [RHEL-152391] {CVE-2026-23171}
- scsi: target: iscsi: Fix use-after-free in iscsit_dec_session_usage_count() (CKI Backport Bot) [RHEL-150426] {CVE-2026-23193}
- macvlan: observe an RCU grace period in macvlan_common_newlink() error path (Hangbin Liu) [RHEL-150229]
- macvlan: fix error recovery in macvlan_common_newlink() (CKI Backport Bot) [RHEL-150229] {CVE-2026-23209}
- media: uvcvideo: Drop stream-&gt;mutex (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix comments in uvc_meta_detect_msxu (Kate Hsuan) [RHEL-128622]
- media: usb: uvcvideo: Store v4l2_fh pointer in file-&gt;private_data (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add support for NV12M tiled variants to v4l2_format_info() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use a count variable for meta_formats instead of 0 terminating (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Auto-set UVC_QUIRK_MSXU_META (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce V4L2_META_FMT_UVC_MSXU_1_5 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Introduce dev-&gt;meta_formats (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not mark valid metadata as invalid (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: uvc_v4l2_unlocked_ioctl: Invert PM logic (Kate Hsuan) [RHEL-128622]
- media: core: export v4l2_translate_cmd (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Turn on the camera if V4L2_EVENT_SUB_FL_SEND_INITIAL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Remove stream-&gt;is_streaming field (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Split uvc_stop_streaming() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Handle locks in uvc_queue_return_buffers (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use vb2 ioctl and fop helpers (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add the missing Raw Bayer pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Add debug prints to v4l2_subdev_collect_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Print early in v4l2_subdev_{enable,disable}_streams() (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add Renesas Camera Receiver Unit pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-subdev: Limit the number of active routes to V4L2_FRAME_DESC_ENTRY_MAX (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Return the handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Don't reset handler's error in v4l2_ctrl_handler_free() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Reduce warnings about missing V4L2_CID_LINK_FREQ control (Kate Hsuan) [RHEL-128622]
- media: v4l2-ctrls: Fix H264 SEPARATE_COLOUR_PLANE check (Kate Hsuan) [RHEL-128622]
- media: v4l2-jpeg: Remove unused v4l2_jpeg_parse_* wrappers (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Replace the check for firmware registered I2C devices (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix 1-byte out-of-bounds read in uvc_parse_format() (Kate Hsuan) [RHEL-128622] {CVE-2025-38680}
- media: uvcvideo: Add quirk for HP Webcam HD 2300 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_v4l2_compat_ioctl32 (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_queue_streamon (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Refactor uvc_ctrl_set_handle() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Populate all errors in uvc_probe() (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Set V4L2_CTRL_FLAG_DISABLED during queryctrl errors (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix bandwidth issue for Alcor camera (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Use dev_err_probe for devm_gpiod_get_optional (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Fix deferred probing error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Rollback non processed entities on error (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Send control events for partial succeeds (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Return the number of processed controls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Do not turn on the camera for some ioctls (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Make power management granular (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Avoid variable shadowing in uvc_ctrl_cleanup_fh (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Increase/decrease the PM counter per IOCTL (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Create uvc_pm_(get|put) functions (Kate Hsuan) [RHEL-128622]
- media: uvcvideo: Keep streaming state in the file handle (Kate Hsuan) [RHEL-128622]
- media: Add C3ISP_PARAMS and C3ISP_STATS meta formats (Kate Hsuan) [RHEL-128622]
- media: v4l: subdev: Fix coverity issue: Logically dead code (Kate Hsuan) [RHEL-128622]
- media: v4l2-dev: fix error handling in __video_register_device() (Kate Hsuan) [RHEL-128622]
- media: common: Add v4l2_find_nearest_size_conditional() (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add RGBR format info (Kate Hsuan) [RHEL-128622]
- media: v4l2: Add NV15 and NV20 pixel formats (Kate Hsuan) [RHEL-128622]
- media: v4l2-common: Add helpers to calculate bytesperline and sizeimage (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: prevent possible overflow in v4l2_detect_gtf() (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: use (t,l)/wxh format for rectangle (Kate Hsuan) [RHEL-128622]
- media: v4l2-core: Introduce v4l2_query_ext_ctrl_to_v4l2_queryctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_s_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_g_ctrl callback (Kate Hsuan) [RHEL-128622]
- media: v4l2: Remove vidioc_queryctrl callback (Kate Hsuan) [RHEL-128622]
- media: ioctl: Simulate v4l2_queryctrl with v4l2_query_ext_ctrl (Kate Hsuan) [RHEL-128622]
- media: v4l2-dv-timings: add v4l2_num_edid_blocks() helper (Kate Hsuan) [RHEL-128622]
- media: v4l: Memset argument to 0 before calling get_mbus_config pad op (Kate Hsuan) [RHEL-128622]
- media: v4l: Support obtaining link frequency via get_mbus_config (Kate Hsuan) [RHEL-128622]
- media: v4l: Support passing media pad argument to v4l2_get_link_freq() (Kate Hsuan) [RHEL-128622]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.47.1.el10_1]" date="1774094400">- dpll: zl3073x: Fix output pin phase adjustment sign (Ivan Vecera) [RHEL-149766]
- redhat: genlog: add new JIRA cloud server hostname (Jan Stancek)
- scsi: qla2xxx: Fix bsg_done() causing double free (Ewan D. Milne) [RHEL-153413] {CVE-2025-71238}
- mm/debug_vm_pgtable: clear page table entries at destroy_args() (Herton R. Krzesinski) [RHEL-127317]</changelog>
</package>
<package pkgid="f3f88be9cea2d6f0b804b78a91d7429c1ac02f2dfe86dead46c977256087b31c" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+2.1.el10_1_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.49.1.el10_1]" date="1774958400">- net/mlx5: Fix ECVF vports unload on shutdown flow (CKI Backport Bot) [RHEL-154540] {CVE-2025-38109}
- mm/damon/sysfs: cleanup attrs subdirs on context dir setup failure (Rafael Aquini) [RHEL-150480] {CVE-2026-23144}
- ALSA: aloop: Fix racy access at PCM trigger (CKI Backport Bot) [RHEL-150132] {CVE-2026-23191}</changelog>
</package>
<package pkgid="448a5ffdd4e55ff83ef39fd1a5c082d0392501f457778b5ef6f9c44aa110cacc" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+3.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.50.1.el10_1]" date="1775131200">- scsi: qla2xxx: Fix improper freeing of purex item (CKI Backport Bot) [RHEL-159225] {CVE-2025-68741}
- net: hv_netvsc: reject RSS hash key programming without RX indirection table (Vinay Mulugund) [RHEL-150573]
- smb: client: fix oops due to uninitialised var in smb2_unlink() (Paulo Alcantara) [RHEL-154414]
- cifs: some missing initializations on replay (Paulo Alcantara) [RHEL-154414]
- smb: client: split cached_fid bitfields to avoid shared-byte RMW races (Paulo Alcantara) [RHEL-154414]
- cifs: make retry logic in read/write path consistent with other paths (Paulo Alcantara) [RHEL-154414]
- cifs: on replayable errors back-off before replay, not after (Paulo Alcantara) [RHEL-154414]
- smb: client: fix potential UAF and double free in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- smb/client: fix memory leak in smb2_open_file() (Paulo Alcantara) [RHEL-154414]
- netfs: avoid double increment of retry_count in subreq (Paulo Alcantara) [RHEL-154414]
- netfs: when subreq is marked for retry, do not check if it faced an error (Paulo Alcantara) [RHEL-154414]
- netfs: Fix early read unlock of page with EOF in middle (Paulo Alcantara) [RHEL-154414]
- netfs: fix reference leak (Paulo Alcantara) [RHEL-154414]
- netfs: Prevent duplicate unlocking (Paulo Alcantara) [RHEL-154414]
- netfs: Fix unbuffered write error handling (Paulo Alcantara) [RHEL-154414]
- net/sched: sch_cake: Fix incorrect qlen reduction in cake_drop (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- net/sched: Make cake_enqueue return NET_XMIT_CN when past buffer_limit (CKI Backport Bot) [RHEL-150451] {CVE-2025-39766}
- xfs: set max_agbno to allow sparse alloc of last full inode chunk (Brian Foster) [RHEL-142607]
- iommu/vt-d: Deduplicate cache_tag_flush_all by reusing flush_range (Jerry Snitselaar) [RHEL-144317]
- iommu/vt-d: Fix missing PASID in dev TLB flush with cache_tag_flush_all (Jerry Snitselaar) [RHEL-144317]
- i40e: validate ring_len parameter against hardware-specific values (CKI Backport Bot) [RHEL-141694]</changelog>
</package>
<package pkgid="d7ca139de4f12fea6eecaef15aab16675cedcef14099bf775d8053154223c357" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+4.1.el10_1_ciq"/>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.51.1.el10_1]" date="1775736000">- smb: client: fix krb5 mount with username option (Paulo Alcantara) [RHEL-158989]</changelog>
</package>
<package pkgid="a85788f094fba7ff0705f0c757f96c628945d72640b00e14bf70ad3961318ec6" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="124.55.1+5.1.el10_1_ciq"/>
  <changelog author="Brett Mastbergen &lt;bmastbergen@ciq.com&gt; - 6.12.0-124.55.1+5.1.el10_1_ciq" date="1779883200">- smb: client: reject userspace cifs.spnego descriptions (Shreeya Patel) [ciqres]
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+4.1.el10_1_ciq" date="1779105600">- ptrace: slightly saner 'get_dumpable()' logic (Roxana Nicolescu) [ciqres] {CVE-2026-46333}</changelog>
  <changelog author="Jonathan Maple &lt;jmaple@ciq.com&gt; - 6.12.0-124.55.1+3.1.el10_1_ciq" date="1778760000">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Hyunwoo Kim) [ciqres] {CVE-2026-46300}</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+2.1.el10_1_ciq" date="1778241601">- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- xfrm: esp: avoid in-place decrypt on shared skb frags (Kuan-Ting Chen) [ciqres] {CVE-2026-43284}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- io_uring/cmd: let cmds to know about dying task (Jonathan Maple) [ciqres]
- idpf: remove obsolete stashing code (Joshua Hay) [ciqres]
- idpf: stop Tx if there are insufficient buffer resources (Joshua Hay) [ciqres]
- idpf: replace flow scheduling buffer ring with buffer pool (Joshua Hay) [ciqres]
- idpf: simplify and fix splitq Tx packet rollback error path (Joshua Hay) [ciqres]
- idpf: improve when to set RE bit logic (Joshua Hay) [ciqres]
- idpf: add support for Tx refillqs in flow scheduling mode (Joshua Hay) [ciqres]
- idpf: fix a race in txq wakeup (Brian Vazquez) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- net: mana: Use page pool fragments for RX buffers instead of full pages to improve memory efficiency. (Shreeya Patel) [ciqres]
- scsi: storvsc: Prefer returning channel with the same CPU as on the I/O issuing CPU (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Extend modify QP (Shreeya Patel) [ciqres]
- net: mana: Reduce waiting time if HWC not responding (Shreeya Patel) [ciqres]
- net: hv_netvsc: fix loss of early receive events from host during channel open. (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Drain send wrs of GSI QP (Shreeya Patel) [ciqres]
- RDMA/mana_ib: add additional port counters (Shreeya Patel) [ciqres]
- net: mana: Fix build errors when CONFIG_NET_SHAPER is disabled (Shreeya Patel) [ciqres]
- net: mana: Handle unsupported HWC commands (Shreeya Patel) [ciqres]
- net: mana: Add speed support in mana_get_link_ksettings (Shreeya Patel) [ciqres]
- net: mana: Add support for net_shaper_ops (Shreeya Patel) [ciqres]
- net: mana: Allocate MSI-X vectors dynamically (Shreeya Patel) [ciqres]
- net: mana: Allow irq_setup() to skip cpus for affinity (Shreeya Patel) [ciqres]
- net: mana: explain irq_setup() algorithm (Shreeya Patel) [ciqres]
- PCI: hv: Allow dynamic MSI-X vector allocation (Shreeya Patel) [ciqres]
- PCI/MSI: Export pci_msix_prepare_desc() for dynamic MSI-X allocations (Shreeya Patel) [ciqres]
- RDMA/mana_ib: Add device statistics support (Shreeya Patel) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-124.55.1+1.1.el10_1_ciq" date="1778241600">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-124.55.1" date="1777982400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support
- Patch MMU for riscv64</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.55.1.el10_1]" date="1777723200">- crypto: algif_aead - snapshot IV for async AEAD requests (Vladislav Dronov) [RHEL-172211]
- crypto: algif_aead - Fix minimum RX size check for decryption (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - reject short ahash digests during instance creation (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Fix src offset when decrypting in-place (Vladislav Dronov) [RHEL-172211]
- crypto: authencesn - Do not place hiseq at end of dst for out-of-place decryption (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: authencesn - reject too-short AAD (assoclen&lt;8) to match ESP/ESN spec (Vladislav Dronov) [RHEL-172211] {CVE-2026-23060}
- crypto: af_alg - Fix page reassignment overflow in af_alg_pull_tsgl (Vladislav Dronov) [RHEL-172211]
- crypto: af_alg - limit RX SG extraction by receive buffer budget (Vladislav Dronov) [RHEL-172211] {CVE-2026-31677}
- crypto: algif_aead - Revert to operating out-of-place (Vladislav Dronov) [RHEL-172211] {CVE-2026-31431}
- crypto: af-alg - fix NULL pointer dereference in scatterwalk (Vladislav Dronov) [RHEL-172211]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.54.1.el10_1]" date="1777291200">- thunderbolt: Fix wake on connect at runtime (Desnes Nunes) [RHEL-108357]
- thunderbolt: Fix a logic error in wake on connect (Desnes Nunes) [RHEL-108357]
- thunderbolt: Use wake on connect and disconnect over suspend (Desnes Nunes) [RHEL-108357]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168071] {CVE-2026-31419}
- net/sched: Only allow act_ct to bind to clsact/ingress qdiscs and shared blocks (CKI Backport Bot) [RHEL-157330] {CVE-2026-23270}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.53.1.el10_1]" date="1776168000">- nfsd: fix heap overflow in NFSv4.0 LOCK replay cache (Scott Mayhew) [RHEL-167019] {CVE-2026-31402}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-124.52.1.el10_1]" date="1775908800">- md/raid1: fix data lost for writemostly rdev (Nigel Croxon) [RHEL-143660]</changelog>
</package>
<package pkgid="01bd4ea9302a7bc1f303a3e71a2be43ef6e215719db910b1f698b1cef85540af" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.22.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+2.1.el10_2_ciq" date="1781524801">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.22.1+1.1.el10_2_ciq" date="1781524800">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.22.1" date="1781179200">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.19.1.el10_2]" date="1779969600">- Bluetooth: hci_sync: Fix UAF in le_read_features_complete (David Marlin) [RHEL-176903] {CVE-2026-43322}
- Bluetooth: hci_sync: fix leaks when hci_cmd_sync_queue_once fails (David Marlin) [RHEL-176903]
- Bluetooth: hci_sync: hci_cmd_sync_queue_once() return -EEXIST if exists (David Marlin) [RHEL-176903]
- Bluetooth: L2CAP: Add support for setting BT_PHY (David Marlin) [RHEL-176903]
- Bluetooth: hci_conn: Fix using conn-&gt;le_{tx,rx}_phy as supported PHYs (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add support for LL Extended Feature Set (David Marlin) [RHEL-176903]
- Bluetooth: ISO: Add support to bind to trigger PAST (David Marlin) [RHEL-176903]
- Bluetooth: HCI: Add initial support for PAST (David Marlin) [RHEL-176903]
- netfilter: flowtable: strictly check for maximum number of actions (CKI Backport Bot) [RHEL-176915] {CVE-2026-43329}
- dpll: zl3073x: report FFO as DPLL vs input reference offset (Ivan Vecera) [RHEL-175824]
- dpll: add fractional frequency offset to pin-parent-device (Ivan Vecera) [RHEL-175824]
- dpll: zl3073x: implement pin operational state reporting (Ivan Vecera) [RHEL-175821]
- dpll: add pin operational state (Ivan Vecera) [RHEL-175821]
- smb: client: validate dacloffset before building DACL pointers (Paulo Alcantara) [RHEL-172827]
- smb: client: use kzalloc to zero-initialize security descriptor buffer (Paulo Alcantara) [RHEL-172827]
- smb: client: scope end_of_dacl to CIFS_DEBUG2 use in parse_dacl (Paulo Alcantara) [RHEL-172827]
- smb: client: require a full NFS mode SID before reading mode bits (Paulo Alcantara) [RHEL-172827]
- smb: client: validate the whole DACL before rewriting it in cifsacl (Paulo Alcantara) [RHEL-172827] {CVE-2026-31709}
- dpll: zl3073x: add ref-sync pair support (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: add ref sync and output clock type helpers (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: use FIELD_MODIFY() for clear-and-set patterns (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: clean up esync get/set and use zl3073x_out_is_ndiv() (Ivan Vecera) [RHEL-167277]
- dpll: zl3073x: implement frequency monitoring (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring callback ops (Ivan Vecera) [RHEL-167837]
- dpll: add frequency monitoring to netlink spec (Ivan Vecera) [RHEL-167837]
- dpll: zl3073x: drop selected and simplify connected ref getter (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add reference priority to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add DPLL channel status fields to zl3073x_chan (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: introduce zl3073x_chan for DPLL channel state (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add zl3073x_ref_state_update helper (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: use struct_group to partition states (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: add die temperature reporting for supported chips (Ivan Vecera) [RHEL-172930]
- dpll: zl3073x: detect DPLL channel count from chip ID at runtime (Ivan Vecera) [RHEL-172930]
- crypto: authenc - Correctly pass EINPROGRESS back up to the caller (CKI Backport Bot) [RHEL-171302]
- nbd: defer config unlock in nbd_genl_connect (CKI Backport Bot) [RHEL-166953] {CVE-2025-68366}
- proc: fix type confusion in pde_set_flags() (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: fix missing pde_set_flags() for net proc files (Abhi Das) [RHEL-163345] {CVE-2025-38653}
- proc: use the same treatment to check proc_lseek as ones for proc_read_iter et.al (CKI Backport Bot) [RHEL-163345] {CVE-2025-38653}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.18.1.el10_2]" date="1779364800">- xfs: fix freemap adjustments when adding xattrs to leaf blocks (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- xfs: delete attr leaf freemap entries when empty (CKI Backport Bot) [RHEL-174051] {CVE-2026-43158}
- Bluetooth: SCO: fix race conditions in sco_sock_connect() (CKI Backport Bot) [RHEL-172603] {CVE-2026-43023}
- Bluetooth: MGMT: validate LTK enc_size on load (CKI Backport Bot) [RHEL-172577] {CVE-2026-43020}
- crypto: tegra - Disable softirqs before finalizing request (CKI Backport Bot) [RHEL-133872]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.17.1.el10_2]" date="1779278400">- dm-thin: fix metadata refcount underflow (Benjamin Marzinski) [RHEL-169625]
- redhat/kernel.spec.template: disable OBJTOOL_WERROR for gcov builds (Oleksii Baranov)
- mm/page_alloc: clear page-&gt;private in free_pages_prepare() (Rafael Aquini) [RHEL-174756] {CVE-2026-43303}
- dpaa2-switch: validate num_ifs to prevent out-of-bounds write (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- dpaa2-switch: prevent ZERO_SIZE_PTR dereference when num_ifs is zero (CKI Backport Bot) [RHEL-174258] {CVE-2026-43205}
- mm: thp: deny THP for files on anonymous inodes (Rafael Aquini) [RHEL-171617] {CVE-2026-23375}
- fs: add S_ANON_INODE (Rafael Aquini) [RHEL-171617]
- anon_inode: raise SB_I_NODEV and SB_I_NOEXEC (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_setattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: explicitly block -&gt;setattr() (Rafael Aquini) [RHEL-171617]
- pidfs: use anon_inode_getattr() (Rafael Aquini) [RHEL-171617]
- anon_inode: use a proper mode internally (Rafael Aquini) [RHEL-171617]
- ice: set max queues in alloc_etherdev_mqs() (CKI Backport Bot) [RHEL-174331]
- ice: use netif_get_num_default_rss_queues() (CKI Backport Bot) [RHEL-174331]
- net: Fix rcu_tasks stall in threaded busypoll (CKI Backport Bot) [RHEL-170809]
- netfilter: xt_tcpmss: check remaining length before reading optlen (CKI Backport Bot) [RHEL-174217] {CVE-2026-43190}
- netfilter: ctnetlink: ensure safe access to master conntrack (CKI Backport Bot) [RHEL-173872] {CVE-2026-43116}
- wifi: brcmfmac: validate bsscfg indices in IF events (CKI Backport Bot) [RHEL-173857] {CVE-2026-43110}
- redhat/configs: enable CONFIG_AQTION on all archs (CKI Backport Bot) [RHEL-171944]
- HID: wacom: fix out-of-bounds read in wacom_intuos_bt_irq (CKI Backport Bot) [RHEL-172745] {CVE-2026-43051}
- netfilter: nf_conntrack_helper: pass helper to expect cleanup (CKI Backport Bot) [RHEL-172625] {CVE-2026-43027}
- io_uring/rsrc: reject zero-length fixed buffer import (CKI Backport Bot) [RHEL-172556] {CVE-2026-43006}
- dpll: zl3073x: Remove redundant cleanup in devm_dpll_init() (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: fix REF_PHASE_OFFSET_COMP register width for some chip IDs (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Fix ref frequency setting (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Include current frequency in supported frequencies list (CKI Backport Bot) [RHEL-164434]
- dpll: zl3073x: Add output pin frequency helper (CKI Backport Bot) [RHEL-164434]
- cifs: make default value of retrans as zero (Paulo Alcantara) [RHEL-171637]
- cifs: remove unnecessary tracing after put tcon (Paulo Alcantara) [RHEL-171637]
- netfilter: ip6t_eui64: reject invalid MAC header for all packets (CKI Backport Bot) [RHEL-171159] {CVE-2026-31685}
- net: sched: act_csum: validate nested VLAN headers (CKI Backport Bot) [RHEL-171142] {CVE-2026-31684}
- drm/mgag200: fix mgag200_bmc_stop_scanout() (Jocelyn Falempe) [RHEL-150180]
- scsi: lpfc: avoid crashing in lpfc_nlp_get() if lpfc_nodelist was freed (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise logging format for failed CT MIB requests" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update debugfs trace ring initialization messages" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check for hdwq null ptr when cleaning up lpfc_vport structure" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Skip RSCN processing when FC_UNLOADING flag is set" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Early return out of FDMI cmpl for locally rejected statuses" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Simplify error handling for failed lpfc_get_sli4_parameters cmd" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Relocate clearing initial phba flags from link up to link down hdlr" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure HBA_SETUP flag is used only for SLI4 in dev_loss_tmo_callbk" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Move clearing of HBA_SETUP flag to before lpfc_sli4_queue_unset" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise CQ_CREATE_SET mailbox bitfield definitions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify end-of-life adapters' model descriptions" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.10" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.10 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "lpfc: don't use file-&gt;f_path.dentry for comparisons" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix wrong function reference in a comment" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: use min() to improve code" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use int type to store negative error codes" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove unused member variables in struct lpfc_hba and lpfc_vport" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Abort outstanding ELS WQEs regardless of if rmmod is in progress" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up allocated queues when queue setup mbox commands fail" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove ndlp kref decrement clause for F_Port_Ctrl in lpfc_cleanup" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Decrement ndlp kref after FDISC retries exhausted" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Check return status of lpfc_reset_flush_io_context during TGT_RESET" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure PLOGI_ACC is sent prior to PRLI in Point to Point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Define size of debugfs entry for xri rebalancing" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix memory leak when nvmeio_trc debugfs entry is used" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Use switch case statements in DIF debugfs handlers" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Clean up extraneous phba dentries" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Convert debugfs directory counts from atomic to unsigned int" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.11" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Copyright updates for 14.4.0.11 patches" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update various NPIV diagnostic log messaging" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Revise discovery related function headers and comments" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Remove redundant NULL ptr assignment in lpfc_els_free_iocb()" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Ensure unregistration of rpis for received PLOGIs" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix leaked ndlp krefs when in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Modify kref handling for Fabric Controller ndlps" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Allow support for BB credit recovery in point-to-point topology" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Add capability to register Platform Name ID to fabric" (Ewan D. Milne) [RHEL-169786]
- Revert "scsi: lpfc: Update lpfc version to 14.4.0.12" (Ewan D. Milne) [RHEL-169786]
- netfilter: nf_conntrack_h323: check for zero length in DecodeQ931() (CKI Backport Bot) [RHEL-166991] {CVE-2026-23455}
- ima: don't clear IMA_DIGSIG flag when setting or removing non-IMA xattr (Bruno Meneguele) [RHEL-169738] {CVE-2025-68183}
- can: j1939: j1939_session_new(): fix skb reference counting (CKI Backport Bot) [RHEL-162260] {CVE-2024-56645}
- netfilter: nf_tables: release flowtable after rcu grace period on error (CKI Backport Bot) [RHEL-160469] {CVE-2026-23392}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.16.1.el10_2]" date="1779105600">- net: skbuff: propagate shared-frag marker through frag-transfer helpers (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- net: skbuff: preserve shared-frag marker during coalescing (Sabrina Dubroca) [RHEL-176053] {CVE-2026-46300}
- ptrace: slightly saner 'get_dumpable()' logic (Ricardo Robaina) [RHEL-176449] {CVE-2026-46333}
- RDMA/umem: Fix double dma_buf_unpin in failure path (CKI Backport Bot) [RHEL-174029] {CVE-2026-43128}
- usbip: validate number_of_packets in usbip_pack_ret_submit() (CKI Backport Bot) [RHEL-171434] {CVE-2026-31607}</changelog>
</package>
<package pkgid="b276342d85f00d2bd61baa94b8148cc23f7035c8004e62798a1a99c97a9520ba" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.26.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+2.1.el10_2_ciq" date="1782734401">- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Brett Mastbergen) [ciqres] {CVE-2025-10263}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (Jonathan Maple) [ciqres] {CVE-2026-46316}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (David Howells) [ciqres] {CVE-2026-43500}
- rxrpc: Fix potential UAF after skb_unshare() failure (David Howells) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.26.1+1.1.el10_2_ciq" date="1782734400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)
- [CIQ] Enable CONFIG_ARM64_ERRATUM_4118414 in aarch64 kernel configs (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.26.1" date="1781956800">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.25.1.el10_2]" date="1781697600">- gitlab-ci: use rhel10.2 builder image (Michael Krausch-Hofmann)
- redhat/configs: enable watchdog pretimout panic functionality for x86 (David Arcari) [RHEL-182299]
- watchdog: wdat_wdt: Fix ACPI table leak in probe function (David Arcari) [RHEL-182299]
- mptcp: fix slab-use-after-free in __inet_lookup_established (CKI Backport Bot) [RHEL-171510] {CVE-2026-31669}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.24.1.el10_2]" date="1781524800">- s390/mm: Add missing secure storage access fixups for donated memory (Jan Polensky) [RHEL-183319]
- ibmveth: Disable GSO for packets with small MSS (Mamatha Inamdar) [RHEL-179723]
- rbd: eliminate a race in lock_dwork draining on unmap (CKI Backport Bot) [RHEL-183127]
- objtool/klp: Fix unexported static call key access for manually built livepatch modules (Joe Lawrence) [RHEL-178495]
- bnxt_en: Fix RSS context delete logic (CKI Backport Bot) [RHEL-180307] {CVE-2026-43260}
- wifi: mac80211: remove station if connection prep fails (CKI Backport Bot) [RHEL-180126] {CVE-2026-46125}
- wifi: mac80211: drop stray 'static' from fast-RX rx_result (CKI Backport Bot) [RHEL-180060] {CVE-2026-46152}
- wifi: mac80211: use safe list iteration in radar detect work (CKI Backport Bot) [RHEL-180022] {CVE-2026-46166}
- Bluetooth: hci_event: fix potential UAF in SSP passkey handlers (CKI Backport Bot) [RHEL-179358] {CVE-2026-46056}
- scsi: lpfc: Fix reusing an ndlp that is marked NLP_DROPPED during FLOGI (Ewan D. Milne) [RHEL-171774]
- can: isotp: fix tx.buf use-after-free in isotp_sendmsg() (CKI Backport Bot) [RHEL-175533] {CVE-2026-31474}
- Buffer overflow in drivers/xen/sys-hypervisor.c (Vitaly Kuznetsov) [RHEL-172516] {CVE-2026-31786}
- Bluetooth: hci_sync: fix stack buffer overflow in hci_le_big_create_sync (CKI Backport Bot) [RHEL-172862] {CVE-2026-31772}
- xen/privcmd: fix double free via VMA splitting (CKI Backport Bot) [RHEL-172492] {CVE-2026-31787}
- rxrpc: Fix RxGK token loading to check bounds (CKI Backport Bot) [RHEL-171419] {CVE-2026-31641}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.23.1.el10_2]" date="1781179200">- s390/ap: Expose ap_bindings_complete_count counter via sysfs (Mircea Dragan) [RHEL-166047]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.22.1.el10_2]" date="1781092800">- redhat: Fix rebuild changelog generation for automotive (Oleksii Baranov)
- scripts/sorttable: Fix endianness handling in build-time mcount sort (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Allow matches to functions before function entry (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use normal sort if theres no relocs in the mcount section (Jerome Marchand) [RHEL-180932]
- ftrace: Check against is_kernel_text() instead of kaslr_offset() (Jerome Marchand) [RHEL-180932]
- ftrace: Test mcount_loc addr before calling ftrace_call_addr() (Jerome Marchand) [RHEL-180932]
- ftrace: Do not over-allocate ftrace memory (Jerome Marchand) [RHEL-180932]
- ftrace: Have ftrace pages output reflect freed pages (Jerome Marchand) [RHEL-180932]
- ftrace: Update the mcount_loc check of skipped entries (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Zero out weak functions in mcount_loc table (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Always use an array for the mcount_loc sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have mcount rela sort use direct values (Jerome Marchand) [RHEL-180932]
- arm64: scripts/sorttable: Implement sorting mcount_loc at boot for arm64 (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use a structure of function pointers for elf helpers (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Get start/stop_mcount_loc from ELF file directly (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Move code from sorttable.h into sorttable.c (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Use uint64_t for mcount sorting (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Sym (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Shdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Add helper functions for Elf_Ehdr (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Sym MACRO over to a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Replace Elf_Shdr Macro with a union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Convert Elf_Ehdr to union (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Make compare_extable() into two functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Have the ORC code use the _r() functions to read (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unneeded Elf_Rel (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused write functions (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: Remove unused macro defines (Jerome Marchand) [RHEL-180932]
- scripts/sorttable: fix orc_sort_cmp() to maintain symmetry and transitivity (Jerome Marchand) [RHEL-180932]
- selinux: fix overlayfs mmap() and mprotect() access checks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add backing_file LSM hooks (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: prepare for adding LSM blob to backing_file (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the debug and console output in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: add/tweak function header comment blocks in lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: fold lsm_init_ordered() into security_init() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup initialize_lsm() and rename to lsm_init_single() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: cleanup the LSM blob size code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework ordered_lsm_parse() to lsm_order_parse() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename/rework append_ordered_lsm() into lsm_order_append() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename exists_ordered_lsm() to lsm_order_exists() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework the LSM enable/disable setter/getter functions (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: get rid of the lsm_names list and do some cleanup (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rework lsm_active_cnt and lsm_idlist[] (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename the lsm order variables for consistency (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: replace the name field with a pointer to the lsm_id struct (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: rename ordered_lsm_init() to lsm_init_ordered() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate lsm_early_cred() and lsm_early_task() into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: integrate report_lsm_order() code into caller (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: introduce looping macros for the initialization code (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: consolidate lsm_allowed() and prepare_lsm() into lsm_prepare() (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the init code out into lsm_init.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- lsm: split the notifier code out into lsm_notifier.c (Ondrej Mosnacek) [RHEL-179437] {CVE-2026-46054}
- fs: constify file ptr in backing_file accessor helpers (Ondrej Mosnacek) [RHEL-179437]
- ipv6: rpl: reserve mac_len headroom when recompressed SRH grows (Antoine Tenart) [RHEL-178413] {CVE-2026-43501}
- ip6_tunnel: clear skb2-&gt;cb[] in ip4ip6_err() (Guillaume Nault) [RHEL-172651] {CVE-2026-43037}
- ALSA: 6fire: fix use-after-free on disconnect (CKI Backport Bot) [RHEL-172973] {CVE-2026-31581}
- erofs: add GFP_NOIO in the bio completion if needed (CKI Backport Bot) [RHEL-171686] {CVE-2026-31467}
- can: raw: fix ro-&gt;uniq use-after-free in raw_rcv() (CKI Backport Bot) [RHEL-170764] {CVE-2026-31532}
- nouveau/gsp: drop WARN_ON in ACPI probes (Gary Guo) [RHEL-167788]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.21.1.el10_2]" date="1780574400">- s390/dasd: Copy detected format information to secondary device (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Move quiesce state with pprc swap (Ramesh Chhetri) [RHEL-176473]
- s390/dasd: Fix gendisk parent after copy pair swap (Ramesh Chhetri) [RHEL-176473]
- ice: fix stats array overflow when VF requests more queues (Michal Schmidt) [RHEL-177518]
- s390/pci: Avoid deadlock between PCI error recovery and mlx5 crdump (Mircea Dragan) [RHEL-166855]
- net: bonding: fix use-after-free in bond_xmit_broadcast() (CKI Backport Bot) [RHEL-168073] {CVE-2026-31419}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.20.1.el10_2]" date="1780401600">- smb: client: reject userspace cifs.spnego descriptions (Paulo Alcantara) [RHEL-178932] {CVE-2026-46243}
- redhat/configs: automotive: disable CONFIG_IO_URING (Brian Masney) [RHEL-179469]
- sched/deadline: Fix dl_server time accounting (Phil Auld) [RHEL-173950]
- smb: client: fix OOB reads parsing symlink error response (CKI Backport Bot) [RHEL-171475] {CVE-2026-31613}
- pNFS: fix a missing wake up while waiting on NFS_LAYOUT_DRAIN (Olga Kornievskaia) [RHEL-157466]</changelog>
</package>
<package pkgid="422c293b94925d530bcc253f807af15fca7291ca61a6bde9d521dbd28e94a8ca" name="rv" arch="x86_64">
  <version epoch="0" ver="6.12.0" rel="211.32.1+2.1.el10_2_ciq"/>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+2.1.el10_2_ciq" date="1784030401">- locking/rtmutex: Skip remove_waiter() when waiter is not enqueued (Davidlohr Bueso) [ciqres] {CVE-2026-53163}
- rtmutex: Use waiter::task instead of current in remove_waiter() (Keenan Dong) [ciqres] {CVE-2026-43499}
- KVM: arm64: Take the SRCU lock for page table walks in fault injection and AT emulation (Jonathan Maple) [ciqres]
- KVM: arm64: Reassign nested_mmus array behind mmu_lock (Jonathan Maple) [ciqres] {CVE-2026-46317}
- net: gro: don't merge zcopy skbs (Sabrina Dubroca) [ciqres]
- rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present (Hyunwoo Kim) [ciqres] {CVE-2026-43500}
- fuse: respect FOPEN_KEEP_CACHE on opendir (Shreeya Patel) [ciqres]
- fs: fuse: add dev id to /dev/fuse fdinfo (Shreeya Patel) [ciqres]
- fuse: fix possibly missing fuse_copy_finish() call in fuse_notify() (Jonathan Maple) [ciqres]
- fuse: add more control over cache invalidation behaviour (Jonathan Maple) [ciqres]
- fuse: don't truncate cached, mutated symlink (Jonathan Maple) [ciqres]
- dcache: export shrink_dentry_list() and add new helper d_dispose_if_unused() (Roxana Nicolescu) [ciqres]
- tools: hv: Enable debug logs for hv_kvp_daemon (Jonathan Maple) [ciqres]</changelog>
  <changelog author="CIQ Engineering &lt;engineering@ciq.com&gt; - 6.12.0-211.32.1+1.1.el10_2_ciq" date="1784030400">- [CIQ] NVR Conventions (Jonathan Maple)
- Adding CIQ secureboot certs and variable overrides (Michael Young)
- Remove ciq_sbsign.macros; rely on mock macrofile for pesign override (Joseph Tate)
- Enable UKI signing (Jonathan Dieter)
- Ensure UKI is signed with the correct key (Michael Young)
- Ensure CIQ IMA keys work (Jonathan Dieter)
- Fix up SBAT and ensure that UKI addons are signed with UKI key (Jonathan Dieter)
- [CIQ] Update the signer information used to create the kernel module signing key when building the kernel (Jonathan Maple)</changelog>
  <changelog author="Release Engineering &lt;releng@rockylinux.org&gt; - 6.12.0-211.32.1" date="1783598400">- Add partial riscv64 support for build root
- Provide basic VisionFive 2 support</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.32.1.el10_2]" date="1783425600">- KVM: x86: Fix shadow paging use-after-free due to unexpected role (Paolo Bonzini) [RHEL-192407] {CVE-2026-53359}
- KVM: x86: Fix shadow paging use-after-free due to unexpected GFN (CKI Backport Bot) [RHEL-186698] {CVE-2026-46113}
- net/sched: ets: Always remove class from active list before deleting in ets_qdisc_change (CKI Backport Bot) [RHEL-183007] {CVE-2025-71066}
- sctp: revalidate list cursor after sctp_sendmsg_to_asoc() in SCTP_SENDALL (CKI Backport Bot) [RHEL-179854] {CVE-2026-46227}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.31.1.el10_2]" date="1783339200">- eventpoll: refresh epi_fget() / ep_remove_file() comments (Ian Kent) [RHEL-180776]
- eventpoll: Fix integer overflow in ep_loop_check_proc() (Ian Kent) [RHEL-180776]
- eventpoll: drop vestigial epi-&gt;dying flag (Ian Kent) [RHEL-180776]
- eventpoll: Fix semi-unbounded recursion (Ian Kent) [RHEL-180776] {CVE-2025-38614}
- eventpoll: drop dead bool return from ep_remove_epi() (Ian Kent) [RHEL-180776]
- eventpoll: refresh eventpoll_release() fast-path comment (Ian Kent) [RHEL-180776]
- eventpoll: move f_lock acquisition into ep_remove_file() (Ian Kent) [RHEL-180776]
- eventpoll: fix ep_remove struct eventpoll / struct file UAF (Ian Kent) [RHEL-180776] {CVE-2026-46242}
- eventpoll: drop vestigial __ prefix from ep_remove_{file,epi}() (Ian Kent) [RHEL-180776]
- eventpoll: move epi_fget() up (Ian Kent) [RHEL-180776]
- eventpoll: rename ep_remove_safe() back to ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: kill __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: split __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: use hlist_is_singular_node() in __ep_remove() (Ian Kent) [RHEL-180776]
- eventpoll: defer struct eventpoll free to RCU grace period (Ian Kent) [RHEL-173832] {CVE-2026-43074}
- epoll: annotate racy check (Ian Kent) [RHEL-180776]
- smb/client: fix out-of-bounds read in smb2_compound_op() (Paulo Alcantara) [RHEL-180048] {CVE-2026-46155}
- smb: client: fix off-by-8 bounds check in check_wsl_eas() (Paulo Alcantara) [RHEL-180048]
- tg3: Fix race for querying speed/duplex (CKI Backport Bot) [RHEL-182770]
- procfs: fix missing RCU protection when reading real_parent in do_task_stat() (CKI Backport Bot) [RHEL-181902] {CVE-2026-46259}
- net/ipv6: ioam6: prevent schema length wraparound in trace fill (Antoine Tenart) [RHEL-174786] {CVE-2026-43341}
- net/mana: Null service_wq on setup error to prevent double destroy (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: mana: Fix double destroy_workqueue on service rescan PCI path (CKI Backport Bot) [RHEL-180277] {CVE-2026-43276}
- net: page_pool: avoid false positive warning if NAPI was never added (Ivan Vecera) [RHEL-162140]</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.30.1.el10_2]" date="1782907200">- ipv6: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- ipv4: account for fraggap on the paged allocation path (Sabrina Dubroca) [RHEL-191349]
- fs/smb/client: fix out-of-bounds read in cifs_sanitize_prepath (CKI Backport Bot) [RHEL-189491] {CVE-2026-43112}
- Enable workaround for ARM64 ERRATUM 4118414 (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on Microsoft Azure Cobalt 100 CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on NVIDIA Olympus CPU (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: errata: Mitigate TLBI errata on various Arm CPUs (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Ultra definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Premium definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- arm64: cputype: Add C1-Pro definitions (Mark Salter) [RHEL-183592] {CVE-2025-10263}
- crypto: krb5 - filter out async aead implementations at alloc (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix async decrypt skipping hash verification (CKI Backport Bot) [RHEL-182537]
- crypto: krb5enc - fix sleepable flag handling in encrypt dispatch (CKI Backport Bot) [RHEL-182537]
- crypto: testmgr - allow authenc(hmac(sha{256,384}),cts(cbc(aes))) in FIPS mode (CKI Backport Bot) [RHEL-182537]
- ASoC: SDCA: fix NULL pointer dereference in sdca_dev_unregister_functions (CKI Backport Bot) [RHEL-185110]
- KVM: arm64: vgic-its: Drop the translation cache reference only for the erased entry (CKI Backport Bot) [RHEL-183965] {CVE-2026-46316}
- netfilter: nft_inner: Fix IPv6 inner_thoff desync (CKI Backport Bot) [RHEL-181936] {CVE-2026-46244}
- drm/gem: Fix inconsistent plane dimension calculation in drm_gem_fb_init_with_funcs() (CKI Backport Bot) [RHEL-179912] {CVE-2026-46209}
- rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}
- rxrpc: Fix potential UAF after skb_unshare() failure (CKI Backport Bot) [RHEL-179566] {CVE-2026-45998}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.29.1.el10_2]" date="1782734400">- RDMA/mlx5: Fix error path fall-through in mlx5_ib_dev_res_srq_init() (CKI Backport Bot) [RHEL-180001] {CVE-2026-46176}
- crypto: tegra - Return ENOMEM when input buffer allocation fails for ccm (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Fix dma_free_coherent size error (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Don't touch bo refcount in host1x bo pin/unpin (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Add missing CRYPTO_ALG_ASYNC (Vladislav Dronov) [RHEL-182759] {CVE-2026-31739}
- crypto: tegra - Use int type to store negative error codes (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - Remove the use of dev_err_probe() (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - use API helpers to setup fallback request (Vladislav Dronov) [RHEL-182759]
- crypto: tegra - remove unneeded crypto_engine_stop() call (Vladislav Dronov) [RHEL-182759]
- scsi: qla2xxx: Add support to report MPI FW state (Ewan D. Milne) [RHEL-181887]
- RDMA/vmw_pvrdma: Fix double free on pvrdma_alloc_ucontext() error path (CKI Backport Bot) [RHEL-179965] {CVE-2026-46189}
- ALSA: aloop: Fix peer runtime UAF during format-change stop (CKI Backport Bot) [RHEL-179317] {CVE-2026-46090}
- ALSA: usb-audio: Add sanity check for OOB writes at silencing (CKI Backport Bot) [RHEL-173937] {CVE-2026-43279}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.28.1.el10_2]" date="1782388800">- selinux: RHEL-only hotfix for execmem regression (Ondrej Mosnacek) [RHEL-185117]
- tcp: fix potential race in tcp_v6_syn_recv_sock() (Paolo Abeni) [RHEL-174242] {CVE-2026-43198}
- scsi: qla2xxx: Completely fix fcport double free (Ewan D. Milne) [RHEL-179755] {CVE-2026-43414}
- RDMA/mana: Remove user triggerable WARN_ON() in mana_ib_create_qp_rss() (CKI Backport Bot) [RHEL-180155] {CVE-2026-46117}
- RDMA/iwcm: Fix workqueue list corruption by removing work_list (CKI Backport Bot) [RHEL-179665] {CVE-2026-45898}
- rxrpc: fix RESPONSE authenticator parser OOB read (CKI Backport Bot) [RHEL-171456] {CVE-2026-31636}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.27.1.el10_2]" date="1782129600">- nvmet-tcp: fix race between ICReq handling and queue teardown (CKI Backport Bot) [RHEL-180106] {CVE-2026-46135}
- RDMA/mana: Validate rx_hash_key_len (CKI Backport Bot) [RHEL-180090] {CVE-2026-46145}
- ipv6: icmp: clear skb2-&gt;cb[] in ip6_err_gen_icmpv6_unreach() (Guillaume Nault) [RHEL-172675] {CVE-2026-43038}</changelog>
  <changelog author="CKI KWF Bot &lt;cki-ci-bot+kwf-gitlab-com@redhat.com&gt; [6.12.0-211.26.1.el10_2]" date="1781784000">- net/sched: fix pedit partial COW leading to page cache corruption (Ivan Vecera) [RHEL-177380] {CVE-2026-46331}
- exit: prevent preemption of oopsing TASK_DEAD task (CKI Backport Bot) [RHEL-180009] {CVE-2026-46173}
- crypto: caam - fix overflow on long hmac keys (CKI Backport Bot) [RHEL-179769] {CVE-2026-43330}
- net: mana: fix use-after-free in add_adev() error path (CKI Backport Bot) [RHEL-172772] {CVE-2026-43056}</changelog>
</package>
<package pkgid="80aebe5395afa1472a92384074ed146c181d6fd3ec87a0d27ee9920746809b6c" name="shim-unsigned-x64" arch="x86_64">
  <version epoch="0" ver="15.8" rel="0.el9_ciq"/>
  <changelog author="Jason Rodriguez &lt;jrodriguez@ciq.com&gt; - 15.8-0" date="1706011200">- Upgrading to Shim 15.8 For CIQ</changelog>
  <changelog author="Jason Rodriguez &lt;jrodriguez@ciq.com&gt; - 15.7-4" date="1700481600">- Removing NX-enabling patch due to NX not being compatible with grub2 and kernel at this time</changelog>
  <changelog author="Jason Rodriguez &lt;jrodriguez@ciq.com&gt; - 15.7-3" date="1697976000">- Enable fix for buggy binutils</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 15.7-2" date="1692705600">- Added real CA from CIQ IT, fixed SBAT</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.co&gt; - 15.7-1" date="1679659200">- Added NX-enabling patch from upstream</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.co&gt; - 15.7-0" date="1679400000">- Upgrading to Shim 15.7 for CIQ</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.co&gt; - 15.6-1" date="1669896000">- Debranded and CA swapped for CIQ from upstream Rocky Linux</changelog>
  <changelog author="Sherif Nagy &lt;sherif@rockylinux.org&gt; - 15.6-1" date="1660651202">- shim 15.6</changelog>
  <changelog author="Sherif Nagy &lt;sherif@rockylinux.org&gt; - 15.6-1" date="1660651201">- Remove main branch</changelog>
  <changelog author="Sherif Nagy &lt;sherif@rockylinux.org&gt; - 15.6-1" date="1660651200">- Adding more patches based on review board feedback https://github.com/rhboot/shim-review/issues/194#issuecomment-894187000 and cherry-pick patches for shim-reivew git 15.4..4583db41ea58195956d4cdf97c43a195939f906b</changelog>
</package>
<package pkgid="ab402457377b42c3c1ec2b68ae7c4916c9ea488b5ecbf4b39a0bc9f78435843d" name="shim-x64" arch="x86_64">
  <version epoch="0" ver="15.8" rel="12.el9_ciq"/>
  <changelog author="Michael L. Young &lt;myoung@ciq.com&gt; - 15.8-12" date="1744372800">Add certwrapper cert for aarch64</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 15.8-11" date="1724241600">Corrected signatures on mmx64 and fbx64 binaries</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 15.8-10" date="1723204800">Forked into new package for Rocky 9 build (with separate signed shim efi binaries)</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 15.8-9" date="1709553600">Finalizing CIQ shim build for Rocky 8, updated to 15.8 base</changelog>
  <changelog author="Skip Grube &lt;sgrube@ciq.com&gt; - 15.6-1" date="1708862400">- Adapting CIQ signed shim package from upstream</changelog>
</package>
<package pkgid="f92b8bba5710733f2fe0f814abc3032ea1c8759f59876958619b3857967fdcde" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="57.0" rel="3"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 50.0-4" date="1711627200">- Add rhel10 gating configuration and tests</changelog>
</package>
<package pkgid="d2ddfd96221d4cf807b781381e05b93ace727441ba225f9ae436404136aa2436" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 51.0-1" date="1713355200">- Update to upstream release v51.0</changelog>
</package>
<package pkgid="6fd6e41dc209c1b351183961164cf0a91ac9eebc76a2783eb569b40282acb10f" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="57.0" rel="4.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-2" date="1719230400">- Bump release for June 2024 mass rebuild</changelog>
</package>
<package pkgid="c4221dfa4a7297a3053b845d298c06ba912a3cc597c9b5720ad22d6d4e95805a" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="57.0" rel="5.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
  <changelog author="Troy Dawson &lt;tdawson@redhat.com&gt; - 51.0-3" date="1730203200">- Bump release for October 2024 mass rebuild:</changelog>
</package>
<package pkgid="bbc902281889f6b60659a576c68ad0a0614d0fcdb65c64a11f3d08cb6dcec22b" name="srp_daemon" arch="x86_64">
  <version epoch="0" ver="57.0" rel="6.el10_1_ciq"/>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-6" date="1773748800">- Add Google patch to fix shm permissions</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-5" date="1766404800">- Add patches from Google to fix various bugs
- Add upstream mana patch to add error code mappings</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1764590400">- Add dist tag (no release bump required)</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-4" date="1761048000">- Add Google patch to fix rping bug</changelog>
  <changelog author="Jonathan Dieter &lt;jdieter@ciq.com&gt; - 57.0-3" date="1757332800">- Add out-of-tree Intel iRDMA driver
- Add Google patches to fix various bugs</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-2" date="1754568000">- Fix pyverbs tests</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 57.0-1" date="1748865600">- Rebase to upstream release v57.0</changelog>
  <changelog author="Andrea Bolognani &lt;abologna@redhat.com&gt; - 54.0-3" date="1746187200">- Properly check %{valgrind_arches}</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-2" date="1745582400">- Fix data corruption in bnxt_re</changelog>
  <changelog author="Kamal Heib &lt;kheib@redhat.com&gt; - 54.0-1" date="1730721600">- Update to upstream release v54.0</changelog>
</package>
</otherdata>